type=CRYPTO_KEY_USER msg=audit(1781340650.699:26659): pid=247241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340650.701:26660): pid=247240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247241 suid=74 rport=45674 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340650.701:26661): pid=247240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247241 suid=74 rport=45674 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340650.779:26662): pid=247240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340650.779:26663): pid=247240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340650.801:26664): pid=247240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340650.801:26665): pid=247240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247241 suid=74 rport=45674 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340650.804:26666): pid=247240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340650.804:26667): pid=247240 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=85 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340650.804:26667): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffebfef4870 a2=1 a3=0 items=0 ppid=39353 pid=247240 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=85 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340650.804:26667): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340650.806:26668): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340650.842:26669): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340650.844:26670): pid=247252 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340650.845:26671): pid=247252 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340650.889:26672): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340650.889:26673): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340650.893:26674): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340650.963:26675): pid=247261 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340650.963:26676): pid=247261 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340650.967:26677): pid=247261 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340650.973:26678): pid=247261 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340650.985:26679): pid=247261 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340650.986:26680): pid=247261 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340650.990:26681): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247252 suid=0 rport=45674 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340650.990:26682): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340650.994:26683): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340650.994:26684): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340650.995:26685): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340650.995:26686): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340650.995:26687): pid=247240 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340651.014:26688): pid=247279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340651.015:26689): pid=247278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247279 suid=74 rport=45682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340651.015:26690): pid=247278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247279 suid=74 rport=45682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340651.110:26691): pid=247278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340651.110:26692): pid=247278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340651.139:26693): pid=247278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340651.140:26694): pid=247278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247279 suid=74 rport=45682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340651.142:26695): pid=247278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340651.144:26696): pid=247278 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=86 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340651.144:26696): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe4bd49aa0 a2=1 a3=0 items=0 ppid=39353 pid=247278 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=86 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340651.144:26696): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340651.146:26697): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340651.181:26698): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340651.183:26699): pid=247282 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247282 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340651.185:26700): pid=247282 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340651.228:26701): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340651.228:26702): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340651.229:26703): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340651.300:26704): pid=247304 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340651.301:26705): pid=247304 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340651.302:26706): pid=247304 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340651.305:26707): pid=247304 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340651.438:26708): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340651.686:26709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340651.691:26710): pid=247304 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340651.691:26711): pid=247304 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340651.695:26712): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247282 suid=0 rport=45682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340651.696:26713): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247282 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340651.699:26714): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340651.700:26715): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340651.700:26716): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340651.700:26717): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340651.700:26718): pid=247278 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340653.643:26719): pid=247606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340653.660:26720): pid=247605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247606 suid=74 rport=48630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340653.660:26721): pid=247605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247606 suid=74 rport=48630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340653.747:26722): pid=247605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340653.747:26723): pid=247605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340653.777:26724): pid=247605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340653.778:26725): pid=247605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247606 suid=74 rport=48630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340653.780:26726): pid=247605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340653.781:26727): pid=247605 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=87 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340653.781:26727): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff44132540 a2=1 a3=0 items=0 ppid=39353 pid=247605 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=87 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340653.781:26727): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340653.782:26728): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340653.812:26729): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340653.814:26730): pid=247625 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340653.816:26731): pid=247625 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340653.860:26732): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340653.860:26733): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340653.865:26734): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340653.943:26735): pid=247659 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340653.944:26736): pid=247659 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340653.945:26737): pid=247659 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340653.951:26738): pid=247659 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340653.968:26739): pid=247659 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340653.968:26740): pid=247659 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340653.971:26741): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340653.971:26742): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340653.971:26743): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247625 suid=0 rport=48630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340653.971:26744): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340653.974:26745): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340653.975:26746): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340653.976:26747): pid=247605 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340653.999:26748): pid=247690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340654.000:26749): pid=247689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247690 suid=74 rport=48632 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340654.000:26750): pid=247689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=247690 suid=74 rport=48632 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340654.089:26751): pid=247689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340654.089:26752): pid=247689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340654.122:26753): pid=247689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340654.122:26754): pid=247689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247690 suid=74 rport=48632 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340654.124:26755): pid=247689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340654.125:26756): pid=247689 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=88 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340654.125:26756): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd21717c20 a2=1 a3=0 items=0 ppid=39353 pid=247689 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=88 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340654.125:26756): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340654.126:26757): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340654.158:26758): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340654.160:26759): pid=247692 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340654.162:26760): pid=247692 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340654.205:26761): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340654.205:26762): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340654.207:26763): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340654.272:26764): pid=247693 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340654.272:26765): pid=247693 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340654.273:26766): pid=247693 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340654.276:26767): pid=247693 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340657.558:26768): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340657.775:26769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340657.780:26770): pid=247693 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340657.780:26771): pid=247693 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340657.784:26772): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=247692 suid=0 rport=48632 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340657.785:26773): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340657.789:26774): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340657.789:26775): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340657.790:26776): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340657.790:26777): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340657.790:26778): pid=247689 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=247689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340663.002:26779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.007:26780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.011:26781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.014:26782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.022:26783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.028:26784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.031:26785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.035:26786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.040:26787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.043:26788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340663.046:26789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.258:26790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.275:26791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.308:26792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.372:26793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.471:26794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.513:26795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.524:26796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.557:26797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.570:26798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.639:26799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340663.666:26800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340664.993:26801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340664.997:26802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340665.001:26803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340665.004:26804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340665.008:26805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340665.268:26806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340665.286:26807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340665.304:26808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340665.326:26809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340665.378:26810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340666.072:26811): pid=248632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340666.074:26812): pid=248631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=248632 suid=74 rport=58400 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340666.074:26813): pid=248631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=248632 suid=74 rport=58400 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340666.168:26814): pid=248631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340666.168:26815): pid=248631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340666.189:26816): pid=248631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340666.189:26817): pid=248631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248632 suid=74 rport=58400 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340666.192:26818): pid=248631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340666.192:26819): pid=248631 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=89 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340666.192:26819): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff907dc920 a2=1 a3=0 items=0 ppid=39353 pid=248631 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=89 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340666.192:26819): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340666.193:26820): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340666.259:26821): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.261:26822): pid=248701 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340666.262:26823): pid=248701 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340666.305:26824): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340666.305:26825): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.309:26826): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340666.371:26827): pid=248703 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340666.372:26828): pid=248703 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340666.374:26829): pid=248703 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340666.380:26830): pid=248703 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340666.393:26831): pid=248703 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340666.393:26832): pid=248703 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.396:26833): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248701 suid=0 rport=58400 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.396:26834): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340666.399:26835): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340666.399:26836): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340666.400:26837): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340666.400:26838): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.400:26839): pid=248631 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.427:26840): pid=248727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340666.428:26841): pid=248726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=248727 suid=74 rport=58408 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340666.428:26842): pid=248726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=248727 suid=74 rport=58408 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340666.514:26843): pid=248726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340666.514:26844): pid=248726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340666.545:26845): pid=248726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340666.545:26846): pid=248726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248727 suid=74 rport=58408 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340666.548:26847): pid=248726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340666.548:26848): pid=248726 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=90 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340666.548:26848): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2cbcc010 a2=1 a3=0 items=0 ppid=39353 pid=248726 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=90 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340666.548:26848): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340666.550:26849): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340666.586:26850): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.587:26851): pid=248729 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340666.589:26852): pid=248729 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340666.632:26853): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340666.632:26854): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340666.633:26855): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340666.705:26856): pid=248732 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340666.705:26857): pid=248732 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340666.707:26858): pid=248732 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340666.711:26859): pid=248732 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340667.605:26860): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781340667.606:26861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340667.611:26862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340667.616:26863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340667.626:26864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340667.649:26865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340667.683:26866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340667.932:26867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340667.949:26868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340667.955:26869): pid=248732 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340667.955:26870): pid=248732 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340667.959:26871): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248729 suid=0 rport=58408 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340667.960:26872): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340667.964:26873): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340667.964:26874): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340667.965:26875): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340667.965:26876): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340667.965:26877): pid=248726 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=248726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340668.007:26878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340668.047:26879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340668.061:26880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340668.126:26881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340668.226:26882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340668.262:26883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340668.546:26884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340673.578:26885): pid=249395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340673.580:26886): pid=249394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=249395 suid=74 rport=45692 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340673.581:26887): pid=249394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=249395 suid=74 rport=45692 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340673.668:26888): pid=249394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340673.668:26889): pid=249394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340673.697:26890): pid=249394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340673.698:26891): pid=249394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=249395 suid=74 rport=45692 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340673.701:26892): pid=249394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340673.701:26893): pid=249394 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=91 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340673.701:26893): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc175ca640 a2=1 a3=0 items=0 ppid=39353 pid=249394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=91 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340673.701:26893): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340673.703:26894): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340673.744:26895): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340673.745:26896): pid=249397 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340673.748:26897): pid=249397 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340673.792:26898): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340673.792:26899): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340673.796:26900): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340673.875:26901): pid=249398 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340673.876:26902): pid=249398 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340673.877:26903): pid=249398 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340673.882:26904): pid=249398 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340673.897:26905): pid=249398 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340673.897:26906): pid=249398 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340673.900:26907): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=249397 suid=0 rport=45692 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340673.900:26908): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340673.903:26909): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340673.904:26910): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340673.905:26911): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340673.905:26912): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340673.905:26913): pid=249394 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340673.932:26914): pid=249414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340673.934:26915): pid=249413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=249414 suid=74 rport=45708 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340673.934:26916): pid=249413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=249414 suid=74 rport=45708 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340674.024:26917): pid=249413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340674.024:26918): pid=249413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340674.054:26919): pid=249413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340674.054:26920): pid=249413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=249414 suid=74 rport=45708 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340674.057:26921): pid=249413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340674.057:26922): pid=249413 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=92 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340674.057:26922): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0780cfb0 a2=1 a3=0 items=0 ppid=39353 pid=249413 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=92 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340674.057:26922): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340674.059:26923): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340674.097:26924): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340674.099:26925): pid=249424 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340674.100:26926): pid=249424 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340674.143:26927): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340674.143:26928): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340674.145:26929): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340674.203:26930): pid=249425 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340674.203:26931): pid=249425 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340674.206:26932): pid=249425 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340674.212:26933): pid=249425 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340677.463:26934): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340677.730:26935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340677.737:26936): pid=249425 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340677.737:26937): pid=249425 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340677.742:26938): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=249424 suid=0 rport=45708 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340677.743:26939): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340677.747:26940): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340677.747:26941): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340677.748:26942): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340677.748:26943): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340677.748:26944): pid=249413 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=249413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340678.992:26945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340678.995:26946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340678.999:26947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340679.192:26948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340679.228:26949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340679.239:26950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340685.814:26951): pid=250159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340685.815:26952): pid=250158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=250159 suid=74 rport=35308 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340685.815:26953): pid=250158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=250159 suid=74 rport=35308 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340685.903:26954): pid=250158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340685.903:26955): pid=250158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340685.936:26956): pid=250158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340685.937:26957): pid=250158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=250159 suid=74 rport=35308 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340685.939:26958): pid=250158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340685.939:26959): pid=250158 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=93 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340685.939:26959): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff24f5cdb0 a2=1 a3=0 items=0 ppid=39353 pid=250158 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=93 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340685.939:26959): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340685.941:26960): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340685.974:26961): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340685.976:26962): pid=250177 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340685.977:26963): pid=250177 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340686.023:26964): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340686.023:26965): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340686.027:26966): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340686.091:26967): pid=250178 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340686.092:26968): pid=250178 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340686.093:26969): pid=250178 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340686.099:26970): pid=250178 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340686.116:26971): pid=250178 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340686.116:26972): pid=250178 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340686.120:26973): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=250177 suid=0 rport=35308 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340686.120:26974): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340686.124:26975): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340686.124:26976): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340686.125:26977): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340686.125:26978): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340686.125:26979): pid=250158 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340686.150:26980): pid=250194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340686.151:26981): pid=250193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=250194 suid=74 rport=35324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340686.152:26982): pid=250193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=250194 suid=74 rport=35324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340686.236:26983): pid=250193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340686.236:26984): pid=250193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340686.267:26985): pid=250193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340686.268:26986): pid=250193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=250194 suid=74 rport=35324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340686.270:26987): pid=250193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340686.271:26988): pid=250193 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=94 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340686.271:26988): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd9f18ce80 a2=1 a3=0 items=0 ppid=39353 pid=250193 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=94 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340686.271:26988): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340686.273:26989): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340686.310:26990): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340686.312:26991): pid=250196 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340686.313:26992): pid=250196 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340686.357:26993): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340686.357:26994): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340686.358:26995): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250197 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340686.407:26996): pid=250197 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340686.407:26997): pid=250197 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340686.408:26998): pid=250197 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340686.412:26999): pid=250197 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340693.497:27000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.501:27001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.505:27002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.509:27003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.513:27004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.521:27005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.648:27006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.655:27007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.661:27008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.671:27009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340693.673:27010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340693.691:27011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340693.840:27012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340693.901:27013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340693.905:27014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340693.956:27015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340693.964:27016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340693.986:27017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340694.012:27018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340694.056:27019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340694.065:27020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340694.235:27021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340695.751:27022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340695.755:27023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340695.759:27024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340695.969:27025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340695.997:27026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340696.054:27027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340698.500:27028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340698.505:27029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340698.509:27030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340698.514:27031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340698.519:27032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340698.524:27033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340698.640:27034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340698.839:27035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340698.873:27036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340698.926:27037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340698.955:27038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340699.021:27039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340699.075:27040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340699.260:27041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781340700.226:27042): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340700.387:27043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340700.391:27044): pid=250197 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340700.392:27045): pid=250197 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340700.397:27046): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=250196 suid=0 rport=35324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340700.398:27047): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250196 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340700.402:27048): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340700.402:27049): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340700.403:27050): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340700.403:27051): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340700.403:27052): pid=250193 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=250193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340709.992:27053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340709.996:27054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340710.000:27055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340710.235:27056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340710.267:27057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340710.283:27058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781340710.492:27059): pid=246465 uid=0 auid=0 ses=83 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340710.493:27060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340710.518:27061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.000:27062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.005:27063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.009:27064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.013:27065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.017:27066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.025:27067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.029:27068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.176:27069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.180:27070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340724.268:27071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.295:27072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.311:27073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.362:27074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.452:27075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.484:27076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.506:27077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.531:27078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.539:27079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.559:27080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340724.620:27081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340725.098:27082): pid=253268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340725.100:27083): pid=253267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253268 suid=74 rport=42628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340725.100:27084): pid=253267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253268 suid=74 rport=42628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340725.193:27085): pid=253267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340725.193:27086): pid=253267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340725.223:27087): pid=253267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340725.224:27088): pid=253267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253268 suid=74 rport=42628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340725.226:27089): pid=253267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340725.226:27090): pid=253267 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=95 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340725.226:27090): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc3d070fd0 a2=1 a3=0 items=0 ppid=39353 pid=253267 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=95 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340725.226:27090): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340725.227:27091): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340725.278:27092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340725.325:27093): pid=253272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781340725.325:27094): pid=253272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781340725.326:27095): pid=253272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340725.327:27096): pid=253272 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=96 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340725.327:27096): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe96762590 a2=1 a3=0 items=0 ppid=1 pid=253272 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=96 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340725.327:27096): proctitle="(systemd)" type=USER_START msg=audit(1781340725.329:27097): pid=253272 uid=0 auid=0 ses=96 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340725.350:27098): prog-id=1465 op=LOAD type=SYSCALL msg=audit(1781340725.350:27098): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff1b2eba20 a2=90 a3=0 items=0 ppid=1 pid=253272 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=96 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340725.350:27098): proctitle="(systemd)" type=BPF msg=audit(1781340725.351:27099): prog-id=0 op=UNLOAD type=BPF msg=audit(1781340725.351:27100): prog-id=1466 op=LOAD type=SYSCALL msg=audit(1781340725.351:27100): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff1b2ebac0 a2=90 a3=4 items=0 ppid=1 pid=253272 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=96 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340725.351:27100): proctitle="(systemd)" type=BPF msg=audit(1781340725.351:27101): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781340725.538:27102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340725.560:27103): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.562:27104): pid=253336 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340725.564:27105): pid=253336 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340725.608:27106): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340725.608:27107): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.610:27108): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340725.655:27109): pid=253337 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340725.656:27110): pid=253337 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340725.656:27111): pid=253337 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340725.659:27112): pid=253337 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340725.670:27113): pid=253337 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340725.671:27114): pid=253337 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340725.673:27115): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340725.673:27116): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.673:27117): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253336 suid=0 rport=42628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.673:27118): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340725.676:27119): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340725.676:27120): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.676:27121): pid=253267 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.700:27122): pid=253360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340725.701:27123): pid=253352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253360 suid=74 rport=42640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340725.702:27124): pid=253352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253360 suid=74 rport=42640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340725.782:27125): pid=253352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340725.782:27126): pid=253352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340725.812:27127): pid=253352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340725.813:27128): pid=253352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253360 suid=74 rport=42640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340725.815:27129): pid=253352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340725.816:27130): pid=253352 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=97 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340725.816:27130): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd024528a0 a2=1 a3=0 items=0 ppid=39353 pid=253352 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=97 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340725.816:27130): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340725.817:27131): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340725.853:27132): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.855:27133): pid=253363 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340725.856:27134): pid=253363 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340725.898:27135): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340725.898:27136): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340725.900:27137): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340725.965:27138): pid=253364 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340725.965:27139): pid=253364 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340725.966:27140): pid=253364 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340725.969:27141): pid=253364 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340726.004:27142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340726.013:27143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340726.112:27144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340726.164:27145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340726.282:27146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340726.385:27147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781340726.566:27148): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340726.789:27149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340726.795:27150): pid=253364 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340726.795:27151): pid=253364 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340726.800:27152): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253363 suid=0 rport=42640 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340726.800:27153): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340726.804:27154): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340726.805:27155): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340726.806:27156): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340726.806:27157): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340726.806:27158): pid=253352 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340728.988:27159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340728.992:27160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340728.994:27161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340728.996:27162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340729.122:27163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340729.291:27164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340729.320:27165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340729.403:27166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340729.425:27167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340729.465:27168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340729.540:27169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340729.566:27170): pid=253916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340729.567:27171): pid=253915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253916 suid=74 rport=42656 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340729.567:27172): pid=253915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253916 suid=74 rport=42656 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340729.656:27173): pid=253915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340729.656:27174): pid=253915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340729.674:27175): pid=253915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340729.675:27176): pid=253915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253916 suid=74 rport=42656 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340729.677:27177): pid=253915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340729.677:27178): pid=253915 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=98 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340729.677:27178): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe297c7010 a2=1 a3=0 items=0 ppid=39353 pid=253915 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=98 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340729.677:27178): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340729.678:27179): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340729.709:27180): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340729.711:27181): pid=253918 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340729.712:27182): pid=253918 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340729.740:27183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781340729.756:27184): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340729.756:27185): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340729.759:27186): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340729.811:27187): pid=253919 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340729.811:27188): pid=253919 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340729.813:27189): pid=253919 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340729.817:27190): pid=253919 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340729.832:27191): pid=253919 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340729.833:27192): pid=253919 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340729.836:27193): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253918 suid=0 rport=42656 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340729.836:27194): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340729.838:27195): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340729.839:27196): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340729.839:27197): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340729.840:27198): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340729.840:27199): pid=253915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340730.458:27200): pid=253959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340730.460:27201): pid=253958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253959 suid=74 rport=42664 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340730.460:27202): pid=253958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=253959 suid=74 rport=42664 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340730.555:27203): pid=253958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340730.555:27204): pid=253958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340730.585:27205): pid=253958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340730.585:27206): pid=253958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253959 suid=74 rport=42664 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340730.587:27207): pid=253958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340730.588:27208): pid=253958 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=99 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340730.588:27208): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4dca8050 a2=1 a3=0 items=0 ppid=39353 pid=253958 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=99 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340730.588:27208): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340730.589:27209): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340730.625:27210): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340730.626:27211): pid=253961 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340730.627:27212): pid=253961 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340730.671:27213): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340730.671:27214): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340730.673:27215): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340730.736:27216): pid=253962 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340730.736:27217): pid=253962 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340730.738:27218): pid=253962 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340730.743:27219): pid=253962 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340730.761:27220): pid=253962 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340730.761:27221): pid=253962 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340730.764:27222): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=253961 suid=0 rport=42664 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340730.764:27223): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340730.766:27224): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340730.767:27225): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340730.768:27226): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340730.768:27227): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340730.768:27228): pid=253958 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=253958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340731.408:27229): pid=254005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340731.409:27230): pid=254004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254005 suid=74 rport=42672 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340731.409:27231): pid=254004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254005 suid=74 rport=42672 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340731.501:27232): pid=254004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340731.501:27233): pid=254004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340731.534:27234): pid=254004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340731.534:27235): pid=254004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254005 suid=74 rport=42672 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340731.537:27236): pid=254004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340731.537:27237): pid=254004 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=100 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340731.537:27237): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5a2877d0 a2=1 a3=0 items=0 ppid=39353 pid=254004 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=100 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340731.537:27237): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340731.539:27238): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340731.575:27239): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340731.577:27240): pid=254007 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340731.578:27241): pid=254007 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340731.621:27242): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340731.621:27243): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340731.623:27244): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340731.685:27245): pid=254008 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340731.686:27246): pid=254008 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340731.687:27247): pid=254008 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340731.689:27248): pid=254008 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340731.698:27249): pid=254008 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340731.699:27250): pid=254008 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340731.701:27251): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254007 suid=0 rport=42672 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340731.702:27252): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340731.704:27253): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340731.704:27254): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340731.705:27255): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340731.705:27256): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340731.706:27257): pid=254004 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340732.379:27258): pid=254130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340732.380:27259): pid=254129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254130 suid=74 rport=42684 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340732.380:27260): pid=254129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254130 suid=74 rport=42684 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340732.468:27261): pid=254129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340732.468:27262): pid=254129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340732.497:27263): pid=254129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340732.497:27264): pid=254129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254130 suid=74 rport=42684 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340732.500:27265): pid=254129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340732.500:27266): pid=254129 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=101 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340732.500:27266): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd8017b8b0 a2=1 a3=0 items=0 ppid=39353 pid=254129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=101 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340732.500:27266): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340732.502:27267): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340732.533:27268): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340732.535:27269): pid=254132 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340732.536:27270): pid=254132 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340732.579:27271): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340732.579:27272): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340732.581:27273): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340732.654:27274): pid=254133 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340732.654:27275): pid=254133 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340732.656:27276): pid=254133 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340732.660:27277): pid=254133 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340732.675:27278): pid=254133 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340732.675:27279): pid=254133 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340732.678:27280): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254132 suid=0 rport=42684 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340732.678:27281): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340732.681:27282): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340732.681:27283): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340732.682:27284): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340732.682:27285): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340732.682:27286): pid=254129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340733.335:27287): pid=254176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340733.337:27288): pid=254175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254176 suid=74 rport=43986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340733.337:27289): pid=254175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254176 suid=74 rport=43986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340733.428:27290): pid=254175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340733.428:27291): pid=254175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340733.458:27292): pid=254175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340733.458:27293): pid=254175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254176 suid=74 rport=43986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340733.461:27294): pid=254175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340733.461:27295): pid=254175 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=102 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340733.461:27295): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda6f3ba00 a2=1 a3=0 items=0 ppid=39353 pid=254175 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=102 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340733.461:27295): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340733.463:27296): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340733.506:27297): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340733.508:27298): pid=254178 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340733.510:27299): pid=254178 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340733.553:27300): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340733.553:27301): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340733.555:27302): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340733.622:27303): pid=254179 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340733.623:27304): pid=254179 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340733.624:27305): pid=254179 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340733.628:27306): pid=254179 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340733.643:27307): pid=254179 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340733.643:27308): pid=254179 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340733.646:27309): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340733.646:27310): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340733.647:27311): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254178 suid=0 rport=43986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340733.647:27312): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340733.650:27313): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340733.651:27314): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340733.652:27315): pid=254175 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340734.327:27316): pid=254277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340734.329:27317): pid=254276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254277 suid=74 rport=43996 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340734.329:27318): pid=254276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254277 suid=74 rport=43996 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340734.421:27319): pid=254276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340734.421:27320): pid=254276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340734.450:27321): pid=254276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340734.451:27322): pid=254276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254277 suid=74 rport=43996 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340734.455:27323): pid=254276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340734.455:27324): pid=254276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=103 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340734.455:27324): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe0298d850 a2=1 a3=0 items=0 ppid=39353 pid=254276 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=103 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340734.455:27324): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340734.455:27325): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340734.486:27326): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340734.488:27327): pid=254279 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340734.489:27328): pid=254279 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340734.533:27329): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340734.533:27330): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340734.536:27331): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340734.606:27332): pid=254280 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340734.606:27333): pid=254280 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340734.606:27334): pid=254280 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340734.611:27335): pid=254280 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340734.624:27336): pid=254280 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340734.624:27337): pid=254280 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340734.628:27338): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254279 suid=0 rport=43996 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340734.628:27339): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340734.631:27340): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340734.631:27341): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340734.632:27342): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340734.632:27343): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340734.632:27344): pid=254276 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340735.265:27345): pid=254323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340735.266:27346): pid=254321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254323 suid=74 rport=44006 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340735.266:27347): pid=254321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254323 suid=74 rport=44006 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340735.358:27348): pid=254321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340735.358:27349): pid=254321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340735.387:27350): pid=254321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340735.388:27351): pid=254321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254323 suid=74 rport=44006 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340735.390:27352): pid=254321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340735.391:27353): pid=254321 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=104 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340735.391:27353): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1920d800 a2=1 a3=0 items=0 ppid=39353 pid=254321 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=104 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340735.391:27353): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340735.392:27354): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340735.432:27355): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340735.434:27356): pid=254325 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340735.435:27357): pid=254325 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340735.478:27358): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340735.478:27359): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340735.479:27360): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340735.546:27361): pid=254326 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340735.547:27362): pid=254326 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340735.549:27363): pid=254326 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340735.553:27364): pid=254326 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340735.569:27365): pid=254326 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340735.569:27366): pid=254326 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340735.572:27367): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254325 suid=0 rport=44006 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340735.573:27368): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340735.576:27369): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340735.576:27370): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340735.577:27371): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340735.577:27372): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340735.577:27373): pid=254321 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340736.206:27374): pid=254358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340736.207:27375): pid=254356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254358 suid=74 rport=44020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340736.208:27376): pid=254356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254358 suid=74 rport=44020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340736.298:27377): pid=254356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340736.298:27378): pid=254356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340736.328:27379): pid=254356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340736.328:27380): pid=254356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254358 suid=74 rport=44020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340736.331:27381): pid=254356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340736.331:27382): pid=254356 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=105 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340736.331:27382): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd960003c0 a2=1 a3=0 items=0 ppid=39353 pid=254356 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=105 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340736.331:27382): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340736.333:27383): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340736.369:27384): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340736.371:27385): pid=254368 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340736.372:27386): pid=254368 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340736.415:27387): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340736.415:27388): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340736.417:27389): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340736.471:27390): pid=254369 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340736.472:27391): pid=254369 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340736.473:27392): pid=254369 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340736.477:27393): pid=254369 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340736.492:27394): pid=254369 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340736.493:27395): pid=254369 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340736.495:27396): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254368 suid=0 rport=44020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340736.496:27397): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340736.498:27398): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340736.499:27399): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340736.500:27400): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340736.500:27401): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340736.500:27402): pid=254356 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340737.146:27403): pid=254448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340737.148:27404): pid=254446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254448 suid=74 rport=44026 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340737.148:27405): pid=254446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254448 suid=74 rport=44026 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340737.239:27406): pid=254446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340737.239:27407): pid=254446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340737.269:27408): pid=254446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340737.270:27409): pid=254446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254448 suid=74 rport=44026 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340737.272:27410): pid=254446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340737.273:27411): pid=254446 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=106 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340737.273:27411): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd7646ad90 a2=1 a3=0 items=0 ppid=39353 pid=254446 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=106 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340737.273:27411): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340737.275:27412): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340737.307:27413): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340737.309:27414): pid=254466 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340737.311:27415): pid=254466 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340737.355:27416): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340737.355:27417): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340737.358:27418): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340737.425:27419): pid=254468 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340737.426:27420): pid=254468 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340737.426:27421): pid=254468 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340737.430:27422): pid=254468 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340737.444:27423): pid=254468 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340737.444:27424): pid=254468 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340737.448:27425): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254466 suid=0 rport=44026 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340737.449:27426): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340737.451:27427): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340737.452:27428): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340737.452:27429): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340737.453:27430): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340737.453:27431): pid=254446 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254446 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.150:27432): pid=254491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340738.152:27433): pid=254484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254491 suid=74 rport=44028 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340738.152:27434): pid=254484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254491 suid=74 rport=44028 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340738.278:27435): pid=254484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340738.279:27436): pid=254484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340738.307:27437): pid=254484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340738.307:27438): pid=254484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254491 suid=74 rport=44028 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340738.310:27439): pid=254484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340738.310:27440): pid=254484 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=107 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340738.310:27440): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6022ac70 a2=1 a3=0 items=0 ppid=39353 pid=254484 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=107 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340738.310:27440): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340738.311:27441): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340738.348:27442): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.349:27443): pid=254509 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340738.351:27444): pid=254509 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340738.394:27445): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340738.394:27446): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.397:27447): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340738.468:27448): pid=254511 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340738.469:27449): pid=254511 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340738.471:27450): pid=254511 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340738.474:27451): pid=254511 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340738.488:27452): pid=254511 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340738.489:27453): pid=254511 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.492:27454): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254509 suid=0 rport=44028 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.493:27455): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340738.496:27456): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340738.496:27457): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340738.497:27458): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340738.498:27459): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.498:27460): pid=254484 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.525:27461): pid=254527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340738.526:27462): pid=254526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254527 suid=74 rport=44030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340738.527:27463): pid=254526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254527 suid=74 rport=44030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340738.613:27464): pid=254526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340738.613:27465): pid=254526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340738.641:27466): pid=254526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340738.643:27467): pid=254526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254527 suid=74 rport=44030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340738.645:27468): pid=254526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340738.645:27469): pid=254526 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=108 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340738.645:27469): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda755fdf0 a2=1 a3=0 items=0 ppid=39353 pid=254526 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=108 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340738.645:27469): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340738.647:27470): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340738.675:27471): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.677:27472): pid=254529 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340738.678:27473): pid=254529 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340738.721:27474): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340738.721:27475): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340738.722:27476): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340738.787:27477): pid=254530 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340738.788:27478): pid=254530 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340738.788:27479): pid=254530 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340738.791:27480): pid=254530 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340738.947:27481): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340739.129:27482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_northd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340739.132:27483): pid=254530 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340739.133:27484): pid=254530 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340739.137:27485): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254529 suid=0 rport=44030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340739.138:27486): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340739.141:27487): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340739.141:27488): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340739.142:27489): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340739.142:27490): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340739.142:27491): pid=254526 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340740.993:27492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340740.997:27493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340741.000:27494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340741.062:27495): pid=254731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340741.064:27496): pid=254729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254731 suid=74 rport=44044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340741.064:27497): pid=254729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254731 suid=74 rport=44044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340741.140:27498): pid=254729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340741.140:27499): pid=254729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340741.165:27500): pid=254729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340741.166:27501): pid=254729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254731 suid=74 rport=44044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340741.167:27502): pid=254729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340741.168:27503): pid=254729 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=109 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340741.168:27503): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde54730a0 a2=1 a3=0 items=0 ppid=39353 pid=254729 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=109 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340741.168:27503): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340741.169:27504): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340741.195:27505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340741.201:27506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340741.201:27507): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340741.202:27508): pid=254781 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340741.203:27509): pid=254781 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340741.209:27510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781340741.246:27511): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340741.246:27512): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340741.249:27513): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340741.315:27514): pid=254791 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340741.315:27515): pid=254791 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340741.316:27516): pid=254791 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340741.323:27517): pid=254791 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340741.335:27518): pid=254791 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340741.335:27519): pid=254791 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340741.338:27520): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254781 suid=0 rport=44044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340741.338:27521): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340741.341:27522): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340741.341:27523): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340741.342:27524): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340741.342:27525): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340741.342:27526): pid=254729 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340742.081:27527): pid=254918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340742.082:27528): pid=254917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254918 suid=74 rport=44048 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340742.083:27529): pid=254917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=254918 suid=74 rport=44048 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340742.171:27530): pid=254917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340742.171:27531): pid=254917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340742.201:27532): pid=254917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340742.202:27533): pid=254917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254918 suid=74 rport=44048 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340742.204:27534): pid=254917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340742.204:27535): pid=254917 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=110 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340742.204:27535): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc49da540 a2=1 a3=0 items=0 ppid=39353 pid=254917 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=110 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340742.204:27535): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340742.206:27536): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340742.242:27537): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340742.243:27538): pid=254932 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340742.244:27539): pid=254932 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340742.287:27540): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340742.287:27541): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340742.288:27542): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340742.350:27543): pid=254936 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340742.350:27544): pid=254936 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340742.353:27545): pid=254936 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340742.357:27546): pid=254936 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340742.373:27547): pid=254936 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340742.373:27548): pid=254936 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340742.375:27549): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=254932 suid=0 rport=44048 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340742.375:27550): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340742.378:27551): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340742.378:27552): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340742.379:27553): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340742.379:27554): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340742.379:27555): pid=254917 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=254917 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340743.037:27556): pid=255059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340743.038:27557): pid=255058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255059 suid=74 rport=44062 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340743.039:27558): pid=255058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255059 suid=74 rport=44062 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340743.134:27559): pid=255058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340743.134:27560): pid=255058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340743.163:27561): pid=255058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340743.164:27562): pid=255058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255059 suid=74 rport=44062 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340743.166:27563): pid=255058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340743.166:27564): pid=255058 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=111 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340743.166:27564): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1edce0f0 a2=1 a3=0 items=0 ppid=39353 pid=255058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=111 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340743.166:27564): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340743.168:27565): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340743.200:27566): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340743.202:27567): pid=255066 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340743.204:27568): pid=255066 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340743.247:27569): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340743.247:27570): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340743.249:27571): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340743.326:27572): pid=255069 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340743.326:27573): pid=255069 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340743.328:27574): pid=255069 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340743.331:27575): pid=255069 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340743.345:27576): pid=255069 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340743.345:27577): pid=255069 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340743.348:27578): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255066 suid=0 rport=44062 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340743.349:27579): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340743.351:27580): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340743.352:27581): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340743.353:27582): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340743.353:27583): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340743.353:27584): pid=255058 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340744.006:27585): pid=255114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340744.007:27586): pid=255113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255114 suid=74 rport=49936 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340744.007:27587): pid=255113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255114 suid=74 rport=49936 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340744.095:27588): pid=255113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340744.095:27589): pid=255113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340744.126:27590): pid=255113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340744.126:27591): pid=255113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255114 suid=74 rport=49936 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340744.129:27592): pid=255113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340744.129:27593): pid=255113 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=112 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340744.129:27593): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc5797c620 a2=1 a3=0 items=0 ppid=39353 pid=255113 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=112 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340744.129:27593): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340744.131:27594): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340744.161:27595): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340744.163:27596): pid=255117 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340744.164:27597): pid=255117 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340744.207:27598): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340744.208:27599): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340744.209:27600): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340744.282:27601): pid=255118 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340744.283:27602): pid=255118 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340744.285:27603): pid=255118 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340744.288:27604): pid=255118 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340744.302:27605): pid=255118 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340744.302:27606): pid=255118 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340744.305:27607): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255117 suid=0 rport=49936 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340744.305:27608): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340744.305:27609): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340744.305:27610): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340744.305:27611): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340744.305:27612): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340744.305:27613): pid=255113 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340744.947:27614): pid=255158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340744.948:27615): pid=255157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255158 suid=74 rport=49950 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340744.949:27616): pid=255157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255158 suid=74 rport=49950 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340745.036:27617): pid=255157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340745.036:27618): pid=255157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340745.065:27619): pid=255157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340745.066:27620): pid=255157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255158 suid=74 rport=49950 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340745.068:27621): pid=255157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340745.068:27622): pid=255157 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=113 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340745.068:27622): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff087f5180 a2=1 a3=0 items=0 ppid=39353 pid=255157 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=113 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340745.068:27622): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340745.070:27623): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340745.109:27624): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340745.111:27625): pid=255162 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340745.112:27626): pid=255162 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340745.155:27627): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340745.155:27628): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340745.156:27629): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340745.219:27630): pid=255163 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340745.219:27631): pid=255163 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340745.220:27632): pid=255163 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340745.223:27633): pid=255163 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340745.238:27634): pid=255163 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340745.238:27635): pid=255163 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340745.240:27636): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255162 suid=0 rport=49950 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340745.240:27637): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340745.243:27638): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340745.243:27639): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340745.244:27640): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340745.244:27641): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340745.244:27642): pid=255157 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340745.835:27643): pid=255204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340745.837:27644): pid=255203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255204 suid=74 rport=49954 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340745.837:27645): pid=255203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255204 suid=74 rport=49954 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340745.913:27646): pid=255203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340745.913:27647): pid=255203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340745.942:27648): pid=255203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340745.943:27649): pid=255203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255204 suid=74 rport=49954 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340745.945:27650): pid=255203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340745.945:27651): pid=255203 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=114 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340745.945:27651): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe4e432bf0 a2=1 a3=0 items=0 ppid=39353 pid=255203 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=114 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340745.945:27651): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340745.946:27652): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340745.986:27653): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340745.988:27654): pid=255206 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340745.990:27655): pid=255206 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340746.033:27656): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340746.033:27657): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340746.035:27658): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340746.096:27659): pid=255207 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340746.097:27660): pid=255207 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340746.098:27661): pid=255207 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340746.101:27662): pid=255207 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340746.111:27663): pid=255207 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340746.112:27664): pid=255207 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340746.115:27665): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255206 suid=0 rport=49954 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340746.115:27666): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340746.118:27667): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340746.118:27668): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340746.119:27669): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340746.119:27670): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340746.119:27671): pid=255203 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340746.742:27672): pid=255247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340746.743:27673): pid=255246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255247 suid=74 rport=49968 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340746.743:27674): pid=255246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255247 suid=74 rport=49968 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340746.831:27675): pid=255246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340746.831:27676): pid=255246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340746.861:27677): pid=255246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340746.862:27678): pid=255246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255247 suid=74 rport=49968 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340746.864:27679): pid=255246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340746.864:27680): pid=255246 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=115 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340746.864:27680): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe327acff0 a2=1 a3=0 items=0 ppid=39353 pid=255246 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=115 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340746.864:27680): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340746.865:27681): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340746.900:27682): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340746.902:27683): pid=255249 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340746.903:27684): pid=255249 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340746.945:27685): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340746.945:27686): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340746.948:27687): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340747.016:27688): pid=255250 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340747.016:27689): pid=255250 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340747.017:27690): pid=255250 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340747.021:27691): pid=255250 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340747.031:27692): pid=255250 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340747.031:27693): pid=255250 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.034:27694): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255249 suid=0 rport=49968 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.035:27695): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340747.037:27696): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340747.038:27697): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340747.039:27698): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340747.039:27699): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.039:27700): pid=255246 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.688:27701): pid=255346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340747.689:27702): pid=255345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255346 suid=74 rport=49980 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340747.689:27703): pid=255345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255346 suid=74 rport=49980 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340747.774:27704): pid=255345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340747.774:27705): pid=255345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340747.806:27706): pid=255345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340747.806:27707): pid=255345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255346 suid=74 rport=49980 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340747.808:27708): pid=255345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340747.808:27709): pid=255345 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=116 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340747.808:27709): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff479150f0 a2=1 a3=0 items=0 ppid=39353 pid=255345 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=116 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340747.808:27709): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340747.809:27710): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340747.844:27711): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.845:27712): pid=255348 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340747.846:27713): pid=255348 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340747.888:27714): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340747.888:27715): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.890:27716): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.927:27717): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255348 suid=0 rport=49980 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.927:27718): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340747.929:27719): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340747.929:27720): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340747.930:27721): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340747.930:27722): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340747.930:27723): pid=255345 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340748.518:27724): pid=255378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340748.519:27725): pid=255370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255378 suid=74 rport=49984 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340748.519:27726): pid=255370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255378 suid=74 rport=49984 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340748.612:27727): pid=255370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340748.612:27728): pid=255370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340748.642:27729): pid=255370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340748.642:27730): pid=255370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255378 suid=74 rport=49984 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340748.645:27731): pid=255370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340748.645:27732): pid=255370 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=117 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340748.645:27732): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd88be2f0 a2=1 a3=0 items=0 ppid=39353 pid=255370 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340748.645:27732): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340748.646:27733): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340748.684:27734): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340748.686:27735): pid=255389 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340748.687:27736): pid=255389 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340748.731:27737): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340748.731:27738): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340748.733:27739): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340748.772:27740): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255389 suid=0 rport=49984 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340748.773:27741): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340748.776:27742): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340748.776:27743): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340748.777:27744): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340748.777:27745): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340748.777:27746): pid=255370 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340749.338:27747): pid=255409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340749.340:27748): pid=255408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255409 suid=74 rport=49986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340749.340:27749): pid=255408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255409 suid=74 rport=49986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340749.429:27750): pid=255408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340749.429:27751): pid=255408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340749.457:27752): pid=255408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340749.457:27753): pid=255408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255409 suid=74 rport=49986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340749.460:27754): pid=255408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340749.460:27755): pid=255408 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=118 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340749.460:27755): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7ec5dc30 a2=1 a3=0 items=0 ppid=39353 pid=255408 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=118 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340749.460:27755): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340749.461:27756): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340749.493:27757): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340749.494:27758): pid=255416 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340749.495:27759): pid=255416 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340749.540:27760): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340749.540:27761): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340749.543:27762): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340749.587:27763): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255416 suid=0 rport=49986 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340749.587:27764): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340749.590:27765): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340749.590:27766): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340749.591:27767): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340749.591:27768): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340749.591:27769): pid=255408 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340750.184:27770): pid=255450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340750.185:27771): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255450 suid=74 rport=49998 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340750.185:27772): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255450 suid=74 rport=49998 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340750.273:27773): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340750.273:27774): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340750.292:27775): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340750.292:27776): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255450 suid=74 rport=49998 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340750.294:27777): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340750.294:27778): pid=255449 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=119 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340750.294:27778): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff78d36b20 a2=1 a3=0 items=0 ppid=39353 pid=255449 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=119 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340750.294:27778): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340750.295:27779): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340750.324:27780): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340750.326:27781): pid=255452 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340750.327:27782): pid=255452 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340750.370:27783): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340750.371:27784): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340750.373:27785): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340750.415:27786): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255452 suid=0 rport=49998 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340750.415:27787): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340750.417:27788): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340750.417:27789): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340750.418:27790): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340750.418:27791): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340750.418:27792): pid=255449 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340750.989:27793): pid=255528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340750.990:27794): pid=255527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255528 suid=74 rport=50012 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340750.990:27795): pid=255527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255528 suid=74 rport=50012 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340751.067:27796): pid=255527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340751.067:27797): pid=255527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340751.097:27798): pid=255527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340751.097:27799): pid=255527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255528 suid=74 rport=50012 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340751.099:27800): pid=255527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340751.099:27801): pid=255527 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=120 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340751.099:27801): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe70f7f4c0 a2=1 a3=0 items=0 ppid=39353 pid=255527 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=120 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340751.099:27801): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340751.101:27802): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340751.139:27803): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340751.140:27804): pid=255532 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340751.142:27805): pid=255532 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340751.185:27806): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340751.185:27807): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340751.187:27808): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340751.238:27809): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340751.238:27810): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340751.238:27811): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255532 suid=0 rport=50012 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340751.239:27812): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340751.242:27813): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340751.243:27814): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340751.243:27815): pid=255527 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340751.819:27816): pid=255572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340751.820:27817): pid=255571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255572 suid=74 rport=50020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340751.821:27818): pid=255571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255572 suid=74 rport=50020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340751.912:27819): pid=255571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340751.912:27820): pid=255571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340751.943:27821): pid=255571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340751.944:27822): pid=255571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255572 suid=74 rport=50020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340751.946:27823): pid=255571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340751.946:27824): pid=255571 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=121 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340751.946:27824): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe2aa98c40 a2=1 a3=0 items=0 ppid=39353 pid=255571 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=121 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340751.946:27824): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340751.947:27825): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340751.977:27826): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340751.979:27827): pid=255597 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340751.981:27828): pid=255597 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340752.023:27829): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340752.024:27830): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.025:27831): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.069:27832): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255597 suid=0 rport=50020 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.070:27833): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340752.072:27834): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340752.073:27835): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340752.074:27836): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340752.074:27837): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.074:27838): pid=255571 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.711:27839): pid=255757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340752.712:27840): pid=255749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255757 suid=74 rport=50034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340752.712:27841): pid=255749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255757 suid=74 rport=50034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340752.806:27842): pid=255749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340752.806:27843): pid=255749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340752.832:27844): pid=255749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340752.834:27845): pid=255749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255757 suid=74 rport=50034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340752.836:27846): pid=255749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340752.837:27847): pid=255749 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=122 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340752.837:27847): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe8b0e99d0 a2=1 a3=0 items=0 ppid=39353 pid=255749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=122 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340752.837:27847): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340752.838:27848): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340752.876:27849): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.877:27850): pid=255808 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255808 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340752.879:27851): pid=255808 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340752.924:27852): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340752.924:27853): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.927:27854): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.983:27855): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255808 suid=0 rport=50034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.984:27856): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255808 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340752.987:27857): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340752.988:27858): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340752.989:27859): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340752.989:27860): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340752.989:27861): pid=255749 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340753.558:27862): pid=255846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340753.560:27863): pid=255845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255846 suid=74 rport=42828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340753.560:27864): pid=255845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255846 suid=74 rport=42828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340753.652:27865): pid=255845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340753.652:27866): pid=255845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340753.673:27867): pid=255845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340753.673:27868): pid=255845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255846 suid=74 rport=42828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340753.676:27869): pid=255845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340753.676:27870): pid=255845 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=123 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340753.676:27870): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeca020450 a2=1 a3=0 items=0 ppid=39353 pid=255845 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340753.676:27870): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340753.677:27871): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340753.719:27872): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340753.720:27873): pid=255864 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340753.721:27874): pid=255864 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340753.765:27875): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340753.765:27876): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340753.766:27877): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340753.810:27878): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255864 suid=0 rport=42828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340753.810:27879): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340753.812:27880): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340753.812:27881): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340753.813:27882): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340753.813:27883): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340753.813:27884): pid=255845 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255845 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340754.392:27885): pid=255945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340754.394:27886): pid=255944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255945 suid=74 rport=42836 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340754.394:27887): pid=255944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=255945 suid=74 rport=42836 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340754.483:27888): pid=255944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340754.483:27889): pid=255944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340754.513:27890): pid=255944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340754.514:27891): pid=255944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255945 suid=74 rport=42836 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340754.516:27892): pid=255944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340754.516:27893): pid=255944 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=124 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340754.516:27893): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd4c3f83e0 a2=1 a3=0 items=0 ppid=39353 pid=255944 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340754.516:27893): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340754.519:27894): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340754.550:27895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.555:27896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.558:27897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.562:27898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.566:27899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.569:27900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.582:27901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.586:27902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340754.589:27903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340754.612:27904): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340754.613:27905): pid=256030 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340754.615:27906): pid=256030 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340754.659:27907): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340754.659:27908): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340754.662:27909): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340754.685:27910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340754.705:27911): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256030 suid=0 rport=42836 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340754.706:27912): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340754.710:27913): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340754.710:27914): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340754.711:27915): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340754.711:27916): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340754.711:27917): pid=255944 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=255944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340754.871:27918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340754.902:27919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340754.931:27920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340754.950:27921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340754.960:27922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340754.987:27923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340755.001:27924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340755.018:27925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340755.141:27926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340755.271:27927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340755.374:27928): pid=256300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340755.376:27929): pid=256299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256300 suid=74 rport=42842 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340755.376:27930): pid=256299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256300 suid=74 rport=42842 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340755.464:27931): pid=256299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340755.464:27932): pid=256299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340755.485:27933): pid=256299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340755.485:27934): pid=256299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256300 suid=74 rport=42842 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340755.488:27935): pid=256299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340755.488:27936): pid=256299 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=125 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340755.488:27936): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff82ee3320 a2=1 a3=0 items=0 ppid=39353 pid=256299 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=125 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340755.488:27936): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340755.489:27937): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340755.530:27938): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340755.531:27939): pid=256304 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340755.533:27940): pid=256304 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340755.576:27941): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340755.576:27942): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340755.580:27943): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340755.611:27944): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256304 suid=0 rport=42842 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340755.612:27945): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340755.614:27946): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340755.615:27947): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340755.615:27948): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340755.615:27949): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340755.615:27950): pid=256299 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340756.181:27951): pid=256395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340756.182:27952): pid=256394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256395 suid=74 rport=42846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340756.183:27953): pid=256394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256395 suid=74 rport=42846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340756.259:27954): pid=256394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340756.259:27955): pid=256394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340756.289:27956): pid=256394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340756.290:27957): pid=256394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256395 suid=74 rport=42846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340756.293:27958): pid=256394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340756.293:27959): pid=256394 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=126 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340756.293:27959): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc04464f10 a2=1 a3=0 items=0 ppid=39353 pid=256394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=126 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340756.293:27959): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340756.295:27960): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340756.314:27961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340756.318:27962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340756.337:27963): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340756.339:27964): pid=256410 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340756.341:27965): pid=256410 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340756.384:27966): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340756.384:27967): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340756.387:27968): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340756.427:27969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340756.437:27970): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340756.437:27971): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340756.437:27972): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256410 suid=0 rport=42846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340756.438:27973): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340756.442:27974): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340756.442:27975): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340756.443:27976): pid=256394 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340756.538:27977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340756.591:27978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340756.657:27979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340757.006:27980): pid=256509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340757.007:27981): pid=256508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256509 suid=74 rport=42854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340757.007:27982): pid=256508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256509 suid=74 rport=42854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340757.087:27983): pid=256508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340757.087:27984): pid=256508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340757.117:27985): pid=256508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340757.118:27986): pid=256508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256509 suid=74 rport=42854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340757.120:27987): pid=256508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340757.121:27988): pid=256508 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=127 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340757.121:27988): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe4d6cf8c0 a2=1 a3=0 items=0 ppid=39353 pid=256508 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=127 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340757.121:27988): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340757.123:27989): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340757.161:27990): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.162:27991): pid=256513 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340757.164:27992): pid=256513 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340757.207:27993): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340757.207:27994): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.211:27995): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340757.265:27996): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340757.265:27997): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.266:27998): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256513 suid=0 rport=42854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.267:27999): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340757.270:28000): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340757.270:28001): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.271:28002): pid=256508 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.789:28003): pid=256647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340757.790:28004): pid=256639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256647 suid=74 rport=42868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340757.791:28005): pid=256639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256647 suid=74 rport=42868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340757.872:28006): pid=256639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340757.872:28007): pid=256639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340757.901:28008): pid=256639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340757.902:28009): pid=256639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256647 suid=74 rport=42868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340757.904:28010): pid=256639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340757.904:28011): pid=256639 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=128 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340757.904:28011): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff57eaa660 a2=1 a3=0 items=0 ppid=39353 pid=256639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=128 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340757.904:28011): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340757.906:28012): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340757.937:28013): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.939:28014): pid=256663 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340757.940:28015): pid=256663 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340757.984:28016): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340757.984:28017): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340757.986:28018): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.035:28019): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256663 suid=0 rport=42868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.036:28020): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340758.039:28021): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340758.039:28022): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340758.040:28023): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340758.040:28024): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.040:28025): pid=256639 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.569:28026): pid=256682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340758.570:28027): pid=256681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256682 suid=74 rport=42884 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340758.570:28028): pid=256681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256682 suid=74 rport=42884 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340758.646:28029): pid=256681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340758.646:28030): pid=256681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340758.676:28031): pid=256681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340758.676:28032): pid=256681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256682 suid=74 rport=42884 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340758.678:28033): pid=256681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340758.678:28034): pid=256681 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=129 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340758.678:28034): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf41e28a0 a2=1 a3=0 items=0 ppid=39353 pid=256681 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=129 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340758.678:28034): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340758.680:28035): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340758.705:28036): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.707:28037): pid=256685 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340758.708:28038): pid=256685 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340758.751:28039): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340758.751:28040): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.752:28041): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.795:28042): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256685 suid=0 rport=42884 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.796:28043): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340758.798:28044): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340758.799:28045): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340758.800:28046): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340758.800:28047): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340758.800:28048): pid=256681 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340759.308:28049): pid=256729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340759.310:28050): pid=256727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256729 suid=74 rport=42888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340759.310:28051): pid=256727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256729 suid=74 rport=42888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340759.402:28052): pid=256727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340759.402:28053): pid=256727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340759.430:28054): pid=256727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340759.430:28055): pid=256727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256729 suid=74 rport=42888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340759.433:28056): pid=256727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340759.433:28057): pid=256727 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=130 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340759.433:28057): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1f225780 a2=1 a3=0 items=0 ppid=39353 pid=256727 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=130 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340759.433:28057): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340759.435:28058): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340759.488:28059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340759.493:28060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340759.499:28061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340759.517:28062): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340759.518:28063): pid=256748 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340759.520:28064): pid=256748 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340759.564:28065): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340759.564:28066): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340759.566:28067): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340759.624:28068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340759.631:28069): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340759.631:28070): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340759.631:28071): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256748 suid=0 rport=42888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340759.632:28072): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340759.636:28073): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340759.636:28074): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340759.637:28075): pid=256727 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340759.811:28076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340759.835:28077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340759.907:28078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340759.936:28079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340759.992:28080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340760.152:28081): pid=256902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340760.153:28082): pid=256901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256902 suid=74 rport=42894 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340760.153:28083): pid=256901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256902 suid=74 rport=42894 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340760.247:28084): pid=256901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340760.247:28085): pid=256901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340760.265:28086): pid=256901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340760.266:28087): pid=256901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256902 suid=74 rport=42894 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340760.268:28088): pid=256901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340760.268:28089): pid=256901 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=131 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340760.268:28089): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed1f37a40 a2=1 a3=0 items=0 ppid=39353 pid=256901 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340760.268:28089): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340760.270:28090): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340760.295:28091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340760.304:28092): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340760.305:28093): pid=256904 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340760.306:28094): pid=256904 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340760.349:28095): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340760.349:28096): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340760.351:28097): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340760.395:28098): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256904 suid=0 rport=42894 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340760.396:28099): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340760.398:28100): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340760.399:28101): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340760.400:28102): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340760.400:28103): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340760.400:28104): pid=256901 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340760.945:28105): pid=256942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340760.946:28106): pid=256934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256942 suid=74 rport=42910 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340760.947:28107): pid=256934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256942 suid=74 rport=42910 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340761.043:28108): pid=256934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340761.043:28109): pid=256934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340761.058:28110): pid=256934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340761.059:28111): pid=256934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256942 suid=74 rport=42910 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340761.061:28112): pid=256934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340761.061:28113): pid=256934 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=132 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340761.061:28113): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa24e13d0 a2=1 a3=0 items=0 ppid=39353 pid=256934 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340761.061:28113): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340761.062:28114): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340761.089:28115): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.090:28116): pid=256946 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340761.092:28117): pid=256946 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340761.135:28118): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340761.135:28119): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.138:28120): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.186:28121): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256946 suid=0 rport=42910 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.187:28122): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340761.190:28123): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340761.190:28124): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340761.191:28125): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340761.191:28126): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.191:28127): pid=256934 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.753:28128): pid=256963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340761.754:28129): pid=256962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256963 suid=74 rport=42916 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340761.755:28130): pid=256962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=256963 suid=74 rport=42916 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340761.842:28131): pid=256962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340761.842:28132): pid=256962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340761.865:28133): pid=256962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340761.865:28134): pid=256962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256963 suid=74 rport=42916 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340761.868:28135): pid=256962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340761.868:28136): pid=256962 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=133 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340761.868:28136): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff3d951f00 a2=1 a3=0 items=0 ppid=39353 pid=256962 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=133 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340761.868:28136): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340761.870:28137): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340761.900:28138): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.901:28139): pid=256973 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340761.903:28140): pid=256973 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340761.946:28141): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340761.946:28142): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.948:28143): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340761.991:28144): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340761.991:28145): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.991:28146): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=256973 suid=0 rport=42916 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.992:28147): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340761.994:28148): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340761.994:28149): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340761.995:28150): pid=256962 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=256962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340762.562:28151): pid=257086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340762.563:28152): pid=257070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257086 suid=74 rport=42918 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340762.563:28153): pid=257070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257086 suid=74 rport=42918 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340762.655:28154): pid=257070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340762.655:28155): pid=257070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340762.683:28156): pid=257070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340762.683:28157): pid=257070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257086 suid=74 rport=42918 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340762.685:28158): pid=257070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340762.685:28159): pid=257070 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=134 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340762.685:28159): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb88e8e00 a2=1 a3=0 items=0 ppid=39353 pid=257070 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=134 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340762.685:28159): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340762.687:28160): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340762.714:28161): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340762.715:28162): pid=257088 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340762.716:28163): pid=257088 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340762.758:28164): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340762.759:28165): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340762.760:28166): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340762.808:28167): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257088 suid=0 rport=42918 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340762.808:28168): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340762.811:28169): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340762.811:28170): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340762.812:28171): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340762.812:28172): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340762.812:28173): pid=257070 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340763.394:28174): pid=257130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340763.395:28175): pid=257129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257130 suid=74 rport=59396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340763.395:28176): pid=257129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257130 suid=74 rport=59396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340763.482:28177): pid=257129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340763.482:28178): pid=257129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340763.511:28179): pid=257129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340763.511:28180): pid=257129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257130 suid=74 rport=59396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340763.513:28181): pid=257129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340763.514:28182): pid=257129 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=135 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340763.514:28182): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd7f5d7a50 a2=1 a3=0 items=0 ppid=39353 pid=257129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=135 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340763.514:28182): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340763.515:28183): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340763.544:28184): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340763.545:28185): pid=257132 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340763.547:28186): pid=257132 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340763.590:28187): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340763.590:28188): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340763.592:28189): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340763.640:28190): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257132 suid=0 rport=59396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340763.640:28191): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340763.642:28192): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340763.643:28193): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340763.643:28194): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340763.643:28195): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340763.643:28196): pid=257129 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340764.202:28197): pid=257171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340764.203:28198): pid=257170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257171 suid=74 rport=59410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340764.203:28199): pid=257170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257171 suid=74 rport=59410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340764.283:28200): pid=257170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340764.283:28201): pid=257170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340764.304:28202): pid=257170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340764.304:28203): pid=257170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257171 suid=74 rport=59410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340764.307:28204): pid=257170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340764.307:28205): pid=257170 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=136 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340764.307:28205): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7bd42d40 a2=1 a3=0 items=0 ppid=39353 pid=257170 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=136 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340764.307:28205): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340764.308:28206): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340764.339:28207): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340764.341:28208): pid=257173 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340764.342:28209): pid=257173 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340764.385:28210): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340764.385:28211): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340764.387:28212): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340764.432:28213): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257173 suid=0 rport=59410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340764.432:28214): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340764.435:28215): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340764.436:28216): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340764.437:28217): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340764.437:28218): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340764.437:28219): pid=257170 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340764.993:28220): pid=257202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340764.994:28221): pid=257189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257202 suid=74 rport=59422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340764.995:28222): pid=257189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257202 suid=74 rport=59422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340765.081:28223): pid=257189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340765.081:28224): pid=257189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340765.109:28225): pid=257189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340765.109:28226): pid=257189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257202 suid=74 rport=59422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340765.111:28227): pid=257189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340765.112:28228): pid=257189 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=137 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340765.112:28228): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc9e8ea40 a2=1 a3=0 items=0 ppid=39353 pid=257189 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=137 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340765.112:28228): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340765.113:28229): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340765.153:28230): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.154:28231): pid=257216 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340765.156:28232): pid=257216 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340765.199:28233): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340765.199:28234): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.200:28235): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257217 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340765.250:28236): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340765.250:28237): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.250:28238): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257216 suid=0 rport=59422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.251:28239): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340765.254:28240): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340765.254:28241): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.255:28242): pid=257189 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.799:28243): pid=257232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340765.800:28244): pid=257231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257232 suid=74 rport=59424 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340765.801:28245): pid=257231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257232 suid=74 rport=59424 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340765.891:28246): pid=257231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340765.892:28247): pid=257231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340765.913:28248): pid=257231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340765.913:28249): pid=257231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257232 suid=74 rport=59424 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340765.916:28250): pid=257231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340765.916:28251): pid=257231 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=138 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340765.916:28251): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec8c23b70 a2=1 a3=0 items=0 ppid=39353 pid=257231 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=138 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340765.916:28251): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340765.918:28252): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340765.942:28253): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.943:28254): pid=257234 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340765.945:28255): pid=257234 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340765.988:28256): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340765.988:28257): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340765.989:28258): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.036:28259): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257234 suid=0 rport=59424 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.037:28260): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340766.040:28261): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340766.040:28262): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340766.041:28263): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340766.041:28264): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.041:28265): pid=257231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.601:28266): pid=257273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340766.602:28267): pid=257272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257273 suid=74 rport=59432 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340766.602:28268): pid=257272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257273 suid=74 rport=59432 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340766.691:28269): pid=257272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340766.691:28270): pid=257272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340766.718:28271): pid=257272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340766.720:28272): pid=257272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257273 suid=74 rport=59432 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340766.722:28273): pid=257272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340766.722:28274): pid=257272 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=139 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340766.722:28274): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd757ff2c0 a2=1 a3=0 items=0 ppid=39353 pid=257272 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=139 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340766.722:28274): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340766.723:28275): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340766.754:28276): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.755:28277): pid=257275 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340766.757:28278): pid=257275 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340766.798:28279): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340766.798:28280): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.801:28281): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.845:28282): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257275 suid=0 rport=59432 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.845:28283): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340766.847:28284): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340766.847:28285): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340766.847:28286): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340766.847:28287): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340766.847:28288): pid=257272 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340767.430:28289): pid=257342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340767.431:28290): pid=257331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257342 suid=74 rport=59436 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340767.431:28291): pid=257331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257342 suid=74 rport=59436 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340767.513:28292): pid=257331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340767.513:28293): pid=257331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340767.541:28294): pid=257331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340767.542:28295): pid=257331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257342 suid=74 rport=59436 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340767.544:28296): pid=257331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340767.544:28297): pid=257331 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=140 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340767.544:28297): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee639e700 a2=1 a3=0 items=0 ppid=39353 pid=257331 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=140 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340767.544:28297): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340767.546:28298): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340767.572:28299): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340767.574:28300): pid=257372 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340767.575:28301): pid=257372 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340767.619:28302): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340767.619:28303): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340767.620:28304): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340767.665:28305): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257372 suid=0 rport=59436 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340767.666:28306): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340767.668:28307): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340767.668:28308): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340767.670:28309): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340767.670:28310): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340767.670:28311): pid=257331 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340768.222:28312): pid=257447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340768.223:28313): pid=257446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257447 suid=74 rport=59442 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340768.224:28314): pid=257446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257447 suid=74 rport=59442 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340768.305:28315): pid=257446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340768.305:28316): pid=257446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340768.334:28317): pid=257446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340768.334:28318): pid=257446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257447 suid=74 rport=59442 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340768.336:28319): pid=257446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340768.337:28320): pid=257446 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=141 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340768.337:28320): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff65793f00 a2=1 a3=0 items=0 ppid=39353 pid=257446 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340768.337:28320): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340768.338:28321): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340768.372:28322): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340768.373:28323): pid=257449 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340768.375:28324): pid=257449 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340768.418:28325): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340768.418:28326): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340768.420:28327): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340768.470:28328): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257449 suid=0 rport=59442 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340768.471:28329): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340768.473:28330): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340768.474:28331): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340768.475:28332): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340768.475:28333): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340768.475:28334): pid=257446 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257446 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.006:28335): pid=257466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340769.007:28336): pid=257463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257466 suid=74 rport=59450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340769.007:28337): pid=257463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257466 suid=74 rport=59450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340769.084:28338): pid=257463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340769.084:28339): pid=257463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340769.106:28340): pid=257463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340769.106:28341): pid=257463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257466 suid=74 rport=59450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340769.108:28342): pid=257463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340769.108:28343): pid=257463 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=142 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340769.108:28343): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc95859780 a2=1 a3=0 items=0 ppid=39353 pid=257463 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340769.108:28343): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340769.110:28344): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340769.151:28345): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.152:28346): pid=257542 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340769.153:28347): pid=257542 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340769.196:28348): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340769.196:28349): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.197:28350): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.249:28351): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257542 suid=0 rport=59450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.249:28352): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340769.252:28353): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340769.252:28354): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340769.253:28355): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340769.253:28356): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.253:28357): pid=257463 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.808:28358): pid=257561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340769.809:28359): pid=257559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257561 suid=74 rport=59466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340769.810:28360): pid=257559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257561 suid=74 rport=59466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340769.895:28361): pid=257559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340769.895:28362): pid=257559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340769.918:28363): pid=257559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340769.918:28364): pid=257559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257561 suid=74 rport=59466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340769.921:28365): pid=257559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340769.921:28366): pid=257559 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=143 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340769.921:28366): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc51403b60 a2=1 a3=0 items=0 ppid=39353 pid=257559 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340769.921:28366): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340769.923:28367): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340769.953:28368): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340769.954:28369): pid=257568 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340769.956:28370): pid=257568 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340770.000:28371): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340770.001:28372): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.004:28373): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.045:28374): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257568 suid=0 rport=59466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.046:28375): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340770.049:28376): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340770.049:28377): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340770.050:28378): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340770.050:28379): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.051:28380): pid=257559 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.593:28381): pid=257633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340770.595:28382): pid=257631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257633 suid=74 rport=59480 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340770.595:28383): pid=257631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257633 suid=74 rport=59480 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340770.690:28384): pid=257631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340770.690:28385): pid=257631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340770.722:28386): pid=257631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340770.723:28387): pid=257631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257633 suid=74 rport=59480 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340770.725:28388): pid=257631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340770.725:28389): pid=257631 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=144 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340770.725:28389): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa65b30f0 a2=1 a3=0 items=0 ppid=39353 pid=257631 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=144 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340770.725:28389): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340770.727:28390): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340770.760:28391): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.762:28392): pid=257663 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340770.763:28393): pid=257663 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340770.805:28394): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340770.805:28395): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.808:28396): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257664 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.859:28397): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257663 suid=0 rport=59480 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.861:28398): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340770.863:28399): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340770.864:28400): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340770.865:28401): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340770.865:28402): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340770.865:28403): pid=257631 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340771.457:28404): pid=257712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340771.459:28405): pid=257709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257712 suid=74 rport=59492 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340771.459:28406): pid=257709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257712 suid=74 rport=59492 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340771.542:28407): pid=257709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340771.542:28408): pid=257709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340771.561:28409): pid=257709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340771.561:28410): pid=257709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257712 suid=74 rport=59492 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340771.564:28411): pid=257709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340771.564:28412): pid=257709 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=145 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340771.564:28412): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec6169020 a2=1 a3=0 items=0 ppid=39353 pid=257709 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=145 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340771.564:28412): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340771.566:28413): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340771.593:28414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340771.597:28415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340771.602:28416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340771.631:28417): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340771.633:28418): pid=257737 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340771.634:28419): pid=257737 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340771.678:28420): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340771.678:28421): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340771.680:28422): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340771.733:28423): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340771.733:28424): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340771.733:28425): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257737 suid=0 rport=59492 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340771.734:28426): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340771.738:28427): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340771.738:28428): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340771.739:28429): pid=257709 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340771.828:28430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340771.862:28431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340771.885:28432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340772.367:28433): pid=257923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340772.369:28434): pid=257922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257923 suid=74 rport=59494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340772.369:28435): pid=257922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257923 suid=74 rport=59494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340772.455:28436): pid=257922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340772.455:28437): pid=257922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340772.485:28438): pid=257922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340772.485:28439): pid=257922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257923 suid=74 rport=59494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340772.487:28440): pid=257922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340772.487:28441): pid=257922 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=146 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340772.487:28441): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1426bed0 a2=1 a3=0 items=0 ppid=39353 pid=257922 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=146 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340772.487:28441): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340772.489:28442): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340772.517:28443): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340772.519:28444): pid=257925 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340772.520:28445): pid=257925 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340772.563:28446): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340772.563:28447): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340772.567:28448): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340772.608:28449): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257925 suid=0 rport=59494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340772.610:28450): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340772.613:28451): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340772.614:28452): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340772.615:28453): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340772.615:28454): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340772.615:28455): pid=257922 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340773.136:28456): pid=257990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340773.137:28457): pid=257988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257990 suid=74 rport=59504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340773.137:28458): pid=257988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=257990 suid=74 rport=59504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340773.218:28459): pid=257988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340773.218:28460): pid=257988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340773.237:28461): pid=257988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340773.237:28462): pid=257988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=257990 suid=74 rport=59504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340773.240:28463): pid=257988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340773.240:28464): pid=257988 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=147 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340773.240:28464): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde7d2a030 a2=1 a3=0 items=0 ppid=39353 pid=257988 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=147 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340773.240:28464): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340773.242:28465): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340773.270:28466): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340773.272:28467): pid=258015 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340773.274:28468): pid=258015 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340773.316:28469): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340773.316:28470): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340773.318:28471): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340773.355:28472): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258015 suid=0 rport=59504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340773.356:28473): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340773.358:28474): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340773.359:28475): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340773.360:28476): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340773.361:28477): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340773.361:28478): pid=257988 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=257988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340773.884:28479): pid=258036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340773.886:28480): pid=258035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258036 suid=74 rport=50294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340773.886:28481): pid=258035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258036 suid=74 rport=50294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340773.978:28482): pid=258035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340773.979:28483): pid=258035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340774.008:28484): pid=258035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340774.009:28485): pid=258035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258036 suid=74 rport=50294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340774.011:28486): pid=258035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340774.012:28487): pid=258035 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=148 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340774.012:28487): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc7050a40 a2=1 a3=0 items=0 ppid=39353 pid=258035 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=148 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340774.012:28487): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340774.014:28488): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340774.049:28489): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.051:28490): pid=258038 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340774.052:28491): pid=258038 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340774.097:28492): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340774.097:28493): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.099:28494): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340774.137:28495): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340774.137:28496): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.137:28497): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258038 suid=0 rport=50294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.137:28498): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340774.140:28499): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340774.140:28500): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.141:28501): pid=258035 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.739:28502): pid=258135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340774.740:28503): pid=258134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258135 suid=74 rport=50300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340774.740:28504): pid=258134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258135 suid=74 rport=50300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340774.817:28505): pid=258134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340774.817:28506): pid=258134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340774.846:28507): pid=258134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340774.847:28508): pid=258134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258135 suid=74 rport=50300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340774.849:28509): pid=258134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340774.849:28510): pid=258134 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=149 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340774.849:28510): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc885afdc0 a2=1 a3=0 items=0 ppid=39353 pid=258134 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=149 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340774.849:28510): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340774.851:28511): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340774.883:28512): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.884:28513): pid=258137 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340774.886:28514): pid=258137 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340774.929:28515): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340774.929:28516): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.932:28517): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.981:28518): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258137 suid=0 rport=50300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.983:28519): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340774.986:28520): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340774.986:28521): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340774.987:28522): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340774.987:28523): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340774.987:28524): pid=258134 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340775.607:28525): pid=258179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340775.608:28526): pid=258178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258179 suid=74 rport=50314 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340775.609:28527): pid=258178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258179 suid=74 rport=50314 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340775.690:28528): pid=258178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340775.690:28529): pid=258178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340775.722:28530): pid=258178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340775.723:28531): pid=258178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258179 suid=74 rport=50314 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340775.725:28532): pid=258178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340775.726:28533): pid=258178 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=150 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340775.726:28533): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb5811e70 a2=1 a3=0 items=0 ppid=39353 pid=258178 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=150 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340775.726:28533): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340775.727:28534): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340775.758:28535): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340775.760:28536): pid=258181 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340775.761:28537): pid=258181 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340775.804:28538): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340775.804:28539): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340775.805:28540): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340775.849:28541): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340775.849:28542): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340775.849:28543): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258181 suid=0 rport=50314 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340775.850:28544): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340775.853:28545): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340775.853:28546): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340775.854:28547): pid=258178 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340776.442:28548): pid=258220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340776.443:28549): pid=258219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258220 suid=74 rport=50324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340776.443:28550): pid=258219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258220 suid=74 rport=50324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340776.523:28551): pid=258219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340776.523:28552): pid=258219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340776.551:28553): pid=258219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340776.551:28554): pid=258219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258220 suid=74 rport=50324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340776.554:28555): pid=258219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340776.554:28556): pid=258219 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=151 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340776.554:28556): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2017b2f0 a2=1 a3=0 items=0 ppid=39353 pid=258219 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=151 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340776.554:28556): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340776.555:28557): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340776.588:28558): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340776.590:28559): pid=258222 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340776.591:28560): pid=258222 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340776.634:28561): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340776.634:28562): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340776.635:28563): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340776.681:28564): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340776.681:28565): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340776.681:28566): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258222 suid=0 rport=50324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340776.682:28567): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340776.685:28568): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340776.685:28569): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340776.686:28570): pid=258219 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340777.263:28571): pid=258239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340777.265:28572): pid=258238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258239 suid=74 rport=50340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340777.265:28573): pid=258238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258239 suid=74 rport=50340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340777.357:28574): pid=258238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340777.357:28575): pid=258238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340777.385:28576): pid=258238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340777.386:28577): pid=258238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258239 suid=74 rport=50340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340777.388:28578): pid=258238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340777.388:28579): pid=258238 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=152 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340777.388:28579): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcced86320 a2=1 a3=0 items=0 ppid=39353 pid=258238 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340777.388:28579): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340777.389:28580): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340777.427:28581): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340777.429:28582): pid=258264 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340777.431:28583): pid=258264 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340777.474:28584): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340777.474:28585): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340777.475:28586): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258267 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340777.518:28587): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258264 suid=0 rport=50340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340777.519:28588): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340777.521:28589): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340777.521:28590): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340777.522:28591): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340777.522:28592): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340777.522:28593): pid=258238 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340778.089:28594): pid=258337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340778.090:28595): pid=258336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258337 suid=74 rport=50356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340778.090:28596): pid=258336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258337 suid=74 rport=50356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340778.180:28597): pid=258336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340778.181:28598): pid=258336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340778.208:28599): pid=258336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340778.208:28600): pid=258336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258337 suid=74 rport=50356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340778.211:28601): pid=258336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340778.211:28602): pid=258336 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=153 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340778.211:28602): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff410435d0 a2=1 a3=0 items=0 ppid=39353 pid=258336 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=153 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340778.211:28602): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340778.212:28603): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340778.238:28604): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340778.240:28605): pid=258340 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340778.241:28606): pid=258340 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340778.284:28607): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340778.284:28608): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340778.288:28609): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340778.334:28610): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258340 suid=0 rport=50356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340778.335:28611): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340778.338:28612): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340778.338:28613): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340778.339:28614): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340778.339:28615): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340778.339:28616): pid=258336 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340778.901:28617): pid=258379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340778.903:28618): pid=258378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258379 suid=74 rport=50372 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340778.903:28619): pid=258378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258379 suid=74 rport=50372 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340778.997:28620): pid=258378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340778.997:28621): pid=258378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340779.025:28622): pid=258378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340779.026:28623): pid=258378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258379 suid=74 rport=50372 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340779.029:28624): pid=258378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340779.029:28625): pid=258378 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=154 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340779.029:28625): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe4980fb40 a2=1 a3=0 items=0 ppid=39353 pid=258378 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=154 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340779.029:28625): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340779.031:28626): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340779.056:28627): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.058:28628): pid=258383 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340779.060:28629): pid=258383 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340779.103:28630): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340779.103:28631): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.106:28632): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.151:28633): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258383 suid=0 rport=50372 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.152:28634): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340779.155:28635): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340779.155:28636): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340779.156:28637): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340779.156:28638): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.156:28639): pid=258378 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.775:28640): pid=258425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340779.776:28641): pid=258424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258425 suid=74 rport=50384 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340779.777:28642): pid=258424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258425 suid=74 rport=50384 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340779.870:28643): pid=258424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340779.870:28644): pid=258424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340779.901:28645): pid=258424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340779.901:28646): pid=258424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258425 suid=74 rport=50384 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340779.904:28647): pid=258424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340779.904:28648): pid=258424 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=155 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340779.904:28648): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc35e7e7f0 a2=1 a3=0 items=0 ppid=39353 pid=258424 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=155 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340779.904:28648): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340779.905:28649): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340779.936:28650): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.938:28651): pid=258427 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340779.940:28652): pid=258427 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340779.982:28653): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340779.983:28654): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340779.986:28655): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.034:28656): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258427 suid=0 rport=50384 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.036:28657): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340780.038:28658): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340780.038:28659): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340780.039:28660): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340780.039:28661): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.039:28662): pid=258424 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.607:28663): pid=258466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340780.608:28664): pid=258465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258466 suid=74 rport=50396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340780.608:28665): pid=258465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258466 suid=74 rport=50396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340780.697:28666): pid=258465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340780.697:28667): pid=258465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340780.715:28668): pid=258465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340780.715:28669): pid=258465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258466 suid=74 rport=50396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340780.718:28670): pid=258465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340780.718:28671): pid=258465 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=156 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340780.718:28671): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf867ef50 a2=1 a3=0 items=0 ppid=39353 pid=258465 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=156 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340780.718:28671): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340780.719:28672): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340780.753:28673): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.754:28674): pid=258468 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340780.756:28675): pid=258468 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340780.799:28676): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340780.799:28677): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.801:28678): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.859:28679): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258468 suid=0 rport=50396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.860:28680): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340780.862:28681): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340780.863:28682): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340780.864:28683): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340780.864:28684): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340780.864:28685): pid=258465 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340781.402:28686): pid=258486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340781.403:28687): pid=258485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258486 suid=74 rport=50404 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340781.403:28688): pid=258485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258486 suid=74 rport=50404 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340781.485:28689): pid=258485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340781.485:28690): pid=258485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340781.515:28691): pid=258485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340781.515:28692): pid=258485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258486 suid=74 rport=50404 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340781.518:28693): pid=258485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340781.518:28694): pid=258485 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=157 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340781.518:28694): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe21f53c10 a2=1 a3=0 items=0 ppid=39353 pid=258485 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=157 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340781.518:28694): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340781.520:28695): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340781.559:28696): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340781.560:28697): pid=258504 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340781.562:28698): pid=258504 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340781.605:28699): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340781.605:28700): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340781.606:28701): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340781.648:28702): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340781.648:28703): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340781.649:28704): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258504 suid=0 rport=50404 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340781.649:28705): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340781.652:28706): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340781.652:28707): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340781.653:28708): pid=258485 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340782.223:28709): pid=258568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340782.224:28710): pid=258567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258568 suid=74 rport=50420 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340782.225:28711): pid=258567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258568 suid=74 rport=50420 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340782.302:28712): pid=258567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340782.302:28713): pid=258567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340782.330:28714): pid=258567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340782.331:28715): pid=258567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258568 suid=74 rport=50420 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340782.333:28716): pid=258567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340782.333:28717): pid=258567 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=158 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340782.333:28717): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe62c772d0 a2=1 a3=0 items=0 ppid=39353 pid=258567 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=158 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340782.333:28717): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340782.335:28718): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340782.371:28719): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340782.372:28720): pid=258570 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340782.374:28721): pid=258570 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340782.416:28722): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340782.416:28723): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340782.418:28724): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340782.466:28725): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258570 suid=0 rport=50420 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340782.467:28726): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340782.470:28727): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340782.471:28728): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340782.472:28729): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340782.472:28730): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340782.472:28731): pid=258567 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.026:28732): pid=258650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340783.027:28733): pid=258649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258650 suid=74 rport=50428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340783.027:28734): pid=258649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258650 suid=74 rport=50428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340783.104:28735): pid=258649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340783.105:28736): pid=258649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340783.134:28737): pid=258649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340783.134:28738): pid=258649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258650 suid=74 rport=50428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340783.137:28739): pid=258649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340783.137:28740): pid=258649 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=159 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340783.137:28740): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd9af40270 a2=1 a3=0 items=0 ppid=39353 pid=258649 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=159 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340783.137:28740): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340783.139:28741): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340783.168:28742): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.169:28743): pid=258654 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340783.171:28744): pid=258654 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340783.214:28745): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340783.214:28746): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.215:28747): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340783.256:28748): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340783.256:28749): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.256:28750): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258654 suid=0 rport=50428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.256:28751): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340783.259:28752): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340783.259:28753): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.260:28754): pid=258649 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.796:28755): pid=258694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258694 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340783.797:28756): pid=258693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258694 suid=74 rport=43602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340783.798:28757): pid=258693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258694 suid=74 rport=43602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340783.891:28758): pid=258693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340783.891:28759): pid=258693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340783.920:28760): pid=258693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340783.921:28761): pid=258693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258694 suid=74 rport=43602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340783.924:28762): pid=258693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340783.924:28763): pid=258693 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=160 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340783.924:28763): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd1d312360 a2=1 a3=0 items=0 ppid=39353 pid=258693 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=160 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340783.924:28763): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340783.926:28764): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340783.957:28765): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340783.959:28766): pid=258696 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340783.961:28767): pid=258696 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340784.004:28768): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340784.004:28769): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.006:28770): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340784.050:28771): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340784.051:28772): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.052:28773): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258696 suid=0 rport=43602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.052:28774): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340784.055:28775): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340784.055:28776): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.056:28777): pid=258693 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.634:28778): pid=258768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340784.656:28779): pid=258767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258768 suid=74 rport=43614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340784.656:28780): pid=258767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=258768 suid=74 rport=43614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340784.730:28781): pid=258767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340784.730:28782): pid=258767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340784.746:28783): pid=258767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340784.747:28784): pid=258767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258768 suid=74 rport=43614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340784.748:28785): pid=258767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340784.748:28786): pid=258767 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=161 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340784.748:28786): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe7c9c6230 a2=1 a3=0 items=0 ppid=39353 pid=258767 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=161 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340784.748:28786): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340784.750:28787): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340784.772:28788): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.773:28789): pid=258786 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340784.774:28790): pid=258786 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340784.816:28791): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340784.816:28792): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.819:28793): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.869:28794): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=258786 suid=0 rport=43614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.873:28795): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340784.874:28796): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340784.875:28797): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340784.876:28798): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340784.876:28799): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340784.876:28800): pid=258767 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=258767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340784.898:28801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340784.987:28802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340784.991:28803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340784.994:28804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340784.998:28805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340785.010:28806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340785.013:28807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340785.086:28808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340785.176:28809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340785.185:28810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340785.200:28811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340785.271:28812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340785.283:28813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340785.290:28814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340785.298:28815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340785.331:28816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340785.348:28817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340785.444:28818): pid=259043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340785.445:28819): pid=259039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259043 suid=74 rport=43618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340785.446:28820): pid=259039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259043 suid=74 rport=43618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781340785.532:28821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340785.534:28822): pid=259039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340785.534:28823): pid=259039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340785.553:28824): pid=259039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340785.553:28825): pid=259039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259043 suid=74 rport=43618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340785.556:28826): pid=259039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340785.556:28827): pid=259039 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=162 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340785.556:28827): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff96c7cc40 a2=1 a3=0 items=0 ppid=39353 pid=259039 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340785.556:28827): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340785.558:28828): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340785.591:28829): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340785.592:28830): pid=259080 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340785.593:28831): pid=259080 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340785.636:28832): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340785.636:28833): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340785.639:28834): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340785.659:28835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340785.691:28836): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340785.692:28837): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340785.692:28838): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259080 suid=0 rport=43618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340785.693:28839): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259080 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340785.695:28840): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340785.695:28841): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340785.696:28842): pid=259039 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340785.725:28843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340786.274:28844): pid=259159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340786.276:28845): pid=259158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259159 suid=74 rport=43626 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340786.276:28846): pid=259158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259159 suid=74 rport=43626 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340786.355:28847): pid=259158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340786.355:28848): pid=259158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340786.385:28849): pid=259158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340786.385:28850): pid=259158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259159 suid=74 rport=43626 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340786.388:28851): pid=259158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340786.388:28852): pid=259158 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=163 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340786.388:28852): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf292d730 a2=1 a3=0 items=0 ppid=39353 pid=259158 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=163 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340786.388:28852): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340786.390:28853): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340786.419:28854): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340786.421:28855): pid=259168 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340786.423:28856): pid=259168 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340786.467:28857): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340786.467:28858): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340786.470:28859): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340786.517:28860): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340786.519:28861): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340786.519:28862): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259168 suid=0 rport=43626 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340786.520:28863): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340786.523:28864): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340786.523:28865): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340786.524:28866): pid=259158 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340786.989:28867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340786.993:28868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340786.996:28869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340787.072:28870): pid=259293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340787.073:28871): pid=259287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259293 suid=74 rport=43628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340787.073:28872): pid=259287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259293 suid=74 rport=43628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340787.155:28873): pid=259287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340787.155:28874): pid=259287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340787.188:28875): pid=259287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340787.188:28876): pid=259287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259293 suid=74 rport=43628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340787.190:28877): pid=259287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340787.190:28878): pid=259287 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=164 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340787.190:28878): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeea5ccce0 a2=1 a3=0 items=0 ppid=39353 pid=259287 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=164 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340787.190:28878): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340787.191:28879): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340787.227:28880): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340787.228:28881): pid=259329 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340787.230:28882): pid=259329 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340787.256:28883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340787.262:28884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781340787.273:28885): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340787.273:28886): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340787.275:28887): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340787.317:28888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340787.318:28889): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259329 suid=0 rport=43628 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340787.318:28890): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340787.321:28891): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340787.321:28892): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340787.322:28893): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340787.322:28894): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340787.322:28895): pid=259287 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259287 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340787.902:28896): pid=259432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340787.904:28897): pid=259431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259432 suid=74 rport=43636 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340787.905:28898): pid=259431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259432 suid=74 rport=43636 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340787.996:28899): pid=259431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340787.996:28900): pid=259431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340788.026:28901): pid=259431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340788.028:28902): pid=259431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259432 suid=74 rport=43636 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340788.030:28903): pid=259431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340788.031:28904): pid=259431 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=165 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340788.031:28904): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcce65c830 a2=1 a3=0 items=0 ppid=39353 pid=259431 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=165 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340788.031:28904): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340788.032:28905): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340788.062:28906): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.063:28907): pid=259434 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340788.066:28908): pid=259434 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340788.110:28909): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340788.110:28910): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.112:28911): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.164:28912): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259434 suid=0 rport=43636 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.169:28913): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340788.172:28914): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340788.173:28915): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340788.174:28916): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340788.174:28917): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.174:28918): pid=259431 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.707:28919): pid=259461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340788.709:28920): pid=259460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259461 suid=74 rport=43638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340788.709:28921): pid=259460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259461 suid=74 rport=43638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340788.795:28922): pid=259460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340788.795:28923): pid=259460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340788.824:28924): pid=259460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340788.824:28925): pid=259460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259461 suid=74 rport=43638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340788.827:28926): pid=259460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340788.827:28927): pid=259460 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=166 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340788.827:28927): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe96c77ea0 a2=1 a3=0 items=0 ppid=39353 pid=259460 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=166 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340788.827:28927): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340788.829:28928): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340788.859:28929): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.860:28930): pid=259479 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340788.861:28931): pid=259479 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340788.904:28932): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340788.904:28933): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.905:28934): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259480 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.948:28935): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259479 suid=0 rport=43638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.949:28936): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340788.951:28937): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340788.951:28938): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340788.952:28939): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340788.952:28940): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340788.952:28941): pid=259460 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340789.478:28942): pid=259499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340789.479:28943): pid=259498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259499 suid=74 rport=43646 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340789.479:28944): pid=259498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259499 suid=74 rport=43646 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340789.575:28945): pid=259498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340789.575:28946): pid=259498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340789.604:28947): pid=259498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340789.605:28948): pid=259498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259499 suid=74 rport=43646 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340789.607:28949): pid=259498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340789.607:28950): pid=259498 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=167 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340789.607:28950): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda2009420 a2=1 a3=0 items=0 ppid=39353 pid=259498 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=167 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340789.607:28950): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340789.609:28951): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340789.637:28952): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340789.638:28953): pid=259501 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340789.640:28954): pid=259501 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340789.684:28955): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340789.684:28956): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340789.707:28957): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340789.748:28958): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340789.748:28959): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340789.748:28960): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259501 suid=0 rport=43646 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340789.749:28961): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340789.752:28962): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340789.752:28963): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340789.753:28964): pid=259498 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340789.989:28965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340789.992:28966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340789.995:28967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340790.000:28968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340790.266:28969): pid=259632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340790.266:28970): pid=259630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259632 suid=74 rport=43648 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340790.267:28971): pid=259630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259632 suid=74 rport=43648 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781340790.282:28972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340790.338:28973): pid=259630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340790.338:28974): pid=259630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340790.361:28975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340790.383:28976): pid=259630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340790.384:28977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340790.384:28978): pid=259630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259632 suid=74 rport=43648 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340790.386:28979): pid=259630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340790.386:28980): pid=259630 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=168 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340790.386:28980): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd11c12640 a2=1 a3=0 items=0 ppid=39353 pid=259630 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=168 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340790.386:28980): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340790.387:28981): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340790.413:28982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340790.416:28983): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340790.417:28984): pid=259658 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340790.419:28985): pid=259658 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340790.463:28986): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340790.463:28987): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=SERVICE_STOP msg=audit(1781340790.464:28988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340790.467:28989): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340790.513:28990): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259658 suid=0 rport=43648 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340790.514:28991): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340790.516:28992): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340790.516:28993): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340790.517:28994): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340790.517:28995): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340790.517:28996): pid=259630 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340790.861:28997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340791.023:28998): pid=259713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340791.024:28999): pid=259712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259713 suid=74 rport=43654 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340791.024:29000): pid=259712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259713 suid=74 rport=43654 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340791.112:29001): pid=259712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340791.112:29002): pid=259712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340791.137:29003): pid=259712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340791.137:29004): pid=259712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259713 suid=74 rport=43654 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340791.139:29005): pid=259712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340791.139:29006): pid=259712 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=169 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340791.139:29006): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc61cd8730 a2=1 a3=0 items=0 ppid=39353 pid=259712 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=169 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340791.139:29006): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340791.140:29007): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340791.167:29008): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.169:29009): pid=259717 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340791.170:29010): pid=259717 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340791.214:29011): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340791.214:29012): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.217:29013): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.263:29014): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259717 suid=0 rport=43654 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.265:29015): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340791.268:29016): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340791.268:29017): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340791.269:29018): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340791.269:29019): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.270:29020): pid=259712 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.801:29021): pid=259740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340791.802:29022): pid=259732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259740 suid=74 rport=43660 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340791.803:29023): pid=259732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259740 suid=74 rport=43660 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340791.884:29024): pid=259732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340791.884:29025): pid=259732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340791.914:29026): pid=259732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340791.914:29027): pid=259732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259740 suid=74 rport=43660 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340791.917:29028): pid=259732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340791.917:29029): pid=259732 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=170 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340791.917:29029): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffdcba1780 a2=1 a3=0 items=0 ppid=39353 pid=259732 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=170 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340791.917:29029): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340791.919:29030): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340791.951:29031): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.953:29032): pid=259758 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340791.955:29033): pid=259758 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340791.998:29034): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340791.998:29035): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340791.999:29036): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.042:29037): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259758 suid=0 rport=43660 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.042:29038): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340792.045:29039): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340792.045:29040): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340792.046:29041): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340792.046:29042): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.046:29043): pid=259732 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.587:29044): pid=259815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340792.589:29045): pid=259814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259815 suid=74 rport=43670 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340792.590:29046): pid=259814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259815 suid=74 rport=43670 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340792.669:29047): pid=259814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340792.669:29048): pid=259814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340792.697:29049): pid=259814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340792.698:29050): pid=259814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259815 suid=74 rport=43670 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340792.700:29051): pid=259814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340792.700:29052): pid=259814 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=171 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340792.700:29052): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef4a57e80 a2=1 a3=0 items=0 ppid=39353 pid=259814 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=171 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340792.700:29052): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340792.702:29053): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340792.740:29054): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.741:29055): pid=259828 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340792.742:29056): pid=259828 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340792.786:29057): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340792.786:29058): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.788:29059): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.825:29060): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259828 suid=0 rport=43670 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.825:29061): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340792.827:29062): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340792.827:29063): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340792.827:29064): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340792.827:29065): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340792.828:29066): pid=259814 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340793.354:29067): pid=259899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340793.356:29068): pid=259898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259899 suid=74 rport=55434 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340793.356:29069): pid=259898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259899 suid=74 rport=55434 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340793.442:29070): pid=259898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340793.442:29071): pid=259898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340793.470:29072): pid=259898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340793.471:29073): pid=259898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259899 suid=74 rport=55434 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340793.474:29074): pid=259898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340793.474:29075): pid=259898 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=172 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340793.474:29075): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3975c130 a2=1 a3=0 items=0 ppid=39353 pid=259898 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=172 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340793.474:29075): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340793.475:29076): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340793.506:29077): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340793.508:29078): pid=259902 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340793.509:29079): pid=259902 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340793.552:29080): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340793.552:29081): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340793.556:29082): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340793.602:29083): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340793.602:29084): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340793.602:29085): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259902 suid=0 rport=55434 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340793.603:29086): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340793.606:29087): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340793.607:29088): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340793.608:29089): pid=259898 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340794.150:29090): pid=259941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340794.151:29091): pid=259940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259941 suid=74 rport=55450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340794.151:29092): pid=259940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259941 suid=74 rport=55450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340794.234:29093): pid=259940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340794.234:29094): pid=259940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340794.263:29095): pid=259940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340794.264:29096): pid=259940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259941 suid=74 rport=55450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340794.266:29097): pid=259940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340794.266:29098): pid=259940 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=173 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340794.266:29098): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd646444b0 a2=1 a3=0 items=0 ppid=39353 pid=259940 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=173 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340794.266:29098): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340794.268:29099): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340794.292:29100): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340794.293:29101): pid=259943 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340794.295:29102): pid=259943 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340794.338:29103): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340794.338:29104): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340794.340:29105): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340794.389:29106): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259943 suid=0 rport=55450 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340794.391:29107): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340794.393:29108): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340794.394:29109): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340794.395:29110): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340794.395:29111): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340794.395:29112): pid=259940 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340794.895:29113): pid=259992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340794.895:29114): pid=259983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259992 suid=74 rport=55466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340794.896:29115): pid=259983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=259992 suid=74 rport=55466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340794.971:29116): pid=259983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340794.971:29117): pid=259983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340794.988:29118): pid=259983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340794.988:29119): pid=259983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259992 suid=74 rport=55466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340794.990:29120): pid=259983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340794.990:29121): pid=259983 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=174 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340794.990:29121): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf2dcbed0 a2=1 a3=0 items=0 ppid=39353 pid=259983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=174 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340794.990:29121): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340794.991:29122): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340795.019:29123): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.020:29124): pid=260037 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340795.021:29125): pid=260037 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340795.064:29126): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340795.064:29127): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.065:29128): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.110:29129): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260037 suid=0 rport=55466 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.110:29130): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340795.112:29131): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340795.112:29132): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340795.113:29133): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340795.113:29134): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.113:29135): pid=259983 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=259983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.679:29136): pid=260060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340795.680:29137): pid=260059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260060 suid=74 rport=55478 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340795.681:29138): pid=260059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260060 suid=74 rport=55478 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340795.774:29139): pid=260059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340795.774:29140): pid=260059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340795.803:29141): pid=260059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340795.803:29142): pid=260059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260060 suid=74 rport=55478 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340795.805:29143): pid=260059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340795.806:29144): pid=260059 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=175 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340795.806:29144): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd2f9b220 a2=1 a3=0 items=0 ppid=39353 pid=260059 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=175 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340795.806:29144): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340795.807:29145): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340795.840:29146): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.842:29147): pid=260062 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340795.843:29148): pid=260062 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340795.886:29149): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340795.886:29150): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.887:29151): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.929:29152): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260062 suid=0 rport=55478 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.929:29153): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340795.932:29154): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340795.932:29155): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340795.933:29156): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340795.933:29157): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340795.933:29158): pid=260059 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340796.485:29159): pid=260101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340796.486:29160): pid=260100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260101 suid=74 rport=55482 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340796.487:29161): pid=260100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260101 suid=74 rport=55482 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340796.566:29162): pid=260100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340796.566:29163): pid=260100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340796.595:29164): pid=260100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340796.595:29165): pid=260100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260101 suid=74 rport=55482 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340796.597:29166): pid=260100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340796.597:29167): pid=260100 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=176 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340796.597:29167): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf329f080 a2=1 a3=0 items=0 ppid=39353 pid=260100 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=176 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340796.597:29167): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340796.598:29168): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340796.634:29169): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340796.636:29170): pid=260103 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340796.637:29171): pid=260103 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340796.680:29172): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340796.680:29173): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340796.682:29174): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340796.720:29175): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340796.720:29176): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340796.720:29177): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260103 suid=0 rport=55482 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340796.720:29178): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340796.723:29179): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340796.723:29180): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340796.724:29181): pid=260100 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340797.251:29182): pid=260144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340797.252:29183): pid=260143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260144 suid=74 rport=55494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340797.253:29184): pid=260143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260144 suid=74 rport=55494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340797.343:29185): pid=260143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340797.343:29186): pid=260143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340797.373:29187): pid=260143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340797.373:29188): pid=260143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260144 suid=74 rport=55494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340797.376:29189): pid=260143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340797.376:29190): pid=260143 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=177 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340797.376:29190): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd08f06eb0 a2=1 a3=0 items=0 ppid=39353 pid=260143 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=177 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340797.376:29190): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340797.377:29191): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340797.407:29192): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340797.408:29193): pid=260146 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340797.410:29194): pid=260146 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340797.453:29195): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340797.453:29196): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340797.455:29197): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340797.501:29198): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260146 suid=0 rport=55494 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340797.501:29199): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340797.505:29200): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340797.506:29201): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340797.507:29202): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340797.507:29203): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340797.508:29204): pid=260143 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340798.049:29205): pid=260231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340798.051:29206): pid=260230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260231 suid=74 rport=55496 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340798.051:29207): pid=260230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260231 suid=74 rport=55496 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340798.143:29208): pid=260230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340798.143:29209): pid=260230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340798.173:29210): pid=260230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340798.173:29211): pid=260230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260231 suid=74 rport=55496 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340798.176:29212): pid=260230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340798.176:29213): pid=260230 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=178 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340798.176:29213): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce69493a0 a2=1 a3=0 items=0 ppid=39353 pid=260230 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=178 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340798.176:29213): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340798.178:29214): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340798.207:29215): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340798.209:29216): pid=260241 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340798.210:29217): pid=260241 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340798.254:29218): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340798.254:29219): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340798.258:29220): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340798.302:29221): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260241 suid=0 rport=55496 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340798.302:29222): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340798.304:29223): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340798.305:29224): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340798.306:29225): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340798.306:29226): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340798.306:29227): pid=260230 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340798.872:29228): pid=260305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340798.873:29229): pid=260276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260305 suid=74 rport=55500 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340798.874:29230): pid=260276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260305 suid=74 rport=55500 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340798.957:29231): pid=260276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340798.957:29232): pid=260276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340798.994:29233): pid=260276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340798.994:29234): pid=260276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260305 suid=74 rport=55500 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340798.996:29235): pid=260276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340798.996:29236): pid=260276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=179 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340798.996:29236): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea894dbb0 a2=1 a3=0 items=0 ppid=39353 pid=260276 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=179 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340798.996:29236): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340798.998:29237): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340799.041:29238): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.042:29239): pid=260324 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340799.044:29240): pid=260324 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340799.087:29241): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340799.087:29242): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.088:29243): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340799.148:29244): pid=260326 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340799.148:29245): pid=260326 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D63696E6465722D766F6C756D65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340799.151:29246): pid=260326 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340799.157:29247): pid=260326 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340799.688:29248): pid=260326 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340799.688:29249): pid=260326 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340799.691:29250): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340799.691:29251): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.691:29252): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260324 suid=0 rport=55500 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.692:29253): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340799.695:29254): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340799.695:29255): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.697:29256): pid=260276 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.720:29257): pid=260361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340799.721:29258): pid=260360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260361 suid=74 rport=55512 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340799.721:29259): pid=260360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260361 suid=74 rport=55512 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340799.798:29260): pid=260360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340799.798:29261): pid=260360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340799.820:29262): pid=260360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340799.821:29263): pid=260360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260361 suid=74 rport=55512 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340799.823:29264): pid=260360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340799.823:29265): pid=260360 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=180 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340799.823:29265): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5b9146c0 a2=1 a3=0 items=0 ppid=39353 pid=260360 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=180 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340799.823:29265): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340799.825:29266): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340799.850:29267): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.851:29268): pid=260363 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340799.853:29269): pid=260363 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340799.895:29270): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340799.895:29271): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340799.897:29272): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340799.947:29273): pid=260364 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340799.947:29274): pid=260364 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F757263652064697361626C65206F70656E737461636B2D63696E6465722D766F6C756D65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340799.947:29275): pid=260364 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340799.951:29276): pid=260364 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340800.723:29277): pid=260364 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340800.724:29278): pid=260364 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340800.728:29279): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260363 suid=0 rport=55512 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340800.729:29280): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340800.732:29281): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340800.732:29282): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340800.732:29283): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340800.732:29284): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340800.732:29285): pid=260360 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340800.754:29286): pid=260464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340800.756:29287): pid=260463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260464 suid=74 rport=55520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340800.756:29288): pid=260463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260464 suid=74 rport=55520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340800.847:29289): pid=260463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340800.847:29290): pid=260463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340800.877:29291): pid=260463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340800.877:29292): pid=260463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260464 suid=74 rport=55520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340800.880:29293): pid=260463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340800.880:29294): pid=260463 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=181 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340800.880:29294): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff2cfdc4d0 a2=1 a3=0 items=0 ppid=39353 pid=260463 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=181 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340800.880:29294): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340800.882:29295): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340800.914:29296): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340800.916:29297): pid=260470 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340800.918:29298): pid=260470 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340800.961:29299): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340800.961:29300): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340800.964:29301): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340801.026:29302): pid=260471 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340801.026:29303): pid=260471 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D63696E6465722D6261636B7570 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340801.027:29304): pid=260471 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340801.031:29305): pid=260471 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340801.578:29306): pid=260471 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340801.578:29307): pid=260471 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340801.581:29308): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340801.581:29309): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340801.581:29310): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260470 suid=0 rport=55520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340801.582:29311): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340801.584:29312): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340801.585:29313): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340801.585:29314): pid=260463 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340801.614:29315): pid=260567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340801.616:29316): pid=260566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260567 suid=74 rport=55522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340801.616:29317): pid=260566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260567 suid=74 rport=55522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340801.704:29318): pid=260566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340801.704:29319): pid=260566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340801.732:29320): pid=260566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340801.733:29321): pid=260566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260567 suid=74 rport=55522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340801.735:29322): pid=260566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340801.735:29323): pid=260566 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=182 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340801.735:29323): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1efe4fc0 a2=1 a3=0 items=0 ppid=39353 pid=260566 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=182 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340801.735:29323): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340801.737:29324): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340801.769:29325): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340801.770:29326): pid=260569 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340801.772:29327): pid=260569 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340801.815:29328): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340801.815:29329): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340801.817:29330): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340801.878:29331): pid=260570 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340801.878:29332): pid=260570 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F757263652064697361626C65206F70656E737461636B2D63696E6465722D6261636B7570 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340801.879:29333): pid=260570 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340801.884:29334): pid=260570 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340801.896:29335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340801.900:29336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340801.906:29337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340802.112:29338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340802.196:29339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340802.212:29340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340802.635:29341): pid=260570 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340802.635:29342): pid=260570 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340802.639:29343): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260569 suid=0 rport=55522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340802.639:29344): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340802.642:29345): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340802.642:29346): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340802.643:29347): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340802.643:29348): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340802.643:29349): pid=260566 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340802.655:29350): pid=260742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340802.656:29351): pid=260741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260742 suid=74 rport=55530 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340802.656:29352): pid=260741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260742 suid=74 rport=55530 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340802.726:29353): pid=260741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340802.726:29354): pid=260741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340802.756:29355): pid=260741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340802.757:29356): pid=260741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260742 suid=74 rport=55530 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340802.758:29357): pid=260741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340802.758:29358): pid=260741 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=183 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340802.758:29358): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde249cef0 a2=1 a3=0 items=0 ppid=39353 pid=260741 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=183 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340802.758:29358): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340802.759:29359): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340802.802:29360): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340802.803:29361): pid=260748 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340802.804:29362): pid=260748 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340802.847:29363): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340802.847:29364): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340802.849:29365): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340802.922:29366): pid=260781 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340802.922:29367): pid=260781 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D6D616E696C612D7368617265 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340802.924:29368): pid=260781 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340802.931:29369): pid=260781 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340803.550:29370): pid=260781 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340803.550:29371): pid=260781 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340803.554:29372): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260748 suid=0 rport=55530 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340803.555:29373): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340803.558:29374): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340803.559:29375): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340803.559:29376): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340803.559:29377): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340803.560:29378): pid=260741 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340803.583:29379): pid=260834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340803.585:29380): pid=260833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260834 suid=74 rport=40292 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340803.585:29381): pid=260833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260834 suid=74 rport=40292 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340803.669:29382): pid=260833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340803.669:29383): pid=260833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340803.699:29384): pid=260833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340803.699:29385): pid=260833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260834 suid=74 rport=40292 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340803.701:29386): pid=260833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340803.702:29387): pid=260833 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=184 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340803.702:29387): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe922d8980 a2=1 a3=0 items=0 ppid=39353 pid=260833 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=184 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340803.702:29387): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340803.703:29388): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340803.733:29389): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340803.734:29390): pid=260836 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340803.736:29391): pid=260836 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340803.779:29392): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340803.779:29393): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340803.780:29394): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340803.845:29395): pid=260837 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340803.846:29396): pid=260837 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F757263652064697361626C65206F70656E737461636B2D6D616E696C612D7368617265 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340803.846:29397): pid=260837 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340803.850:29398): pid=260837 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340804.616:29399): pid=260837 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340804.616:29400): pid=260837 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340804.620:29401): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260836 suid=0 rport=40292 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340804.620:29402): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340804.623:29403): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340804.624:29404): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340804.624:29405): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340804.624:29406): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340804.624:29407): pid=260833 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340804.640:29408): pid=260883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340804.642:29409): pid=260882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260883 suid=74 rport=40294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340804.642:29410): pid=260882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260883 suid=74 rport=40294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340804.719:29411): pid=260882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340804.719:29412): pid=260882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340804.739:29413): pid=260882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340804.740:29414): pid=260882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260883 suid=74 rport=40294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340804.742:29415): pid=260882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340804.743:29416): pid=260882 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=185 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340804.743:29416): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd768517f0 a2=1 a3=0 items=0 ppid=39353 pid=260882 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=185 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340804.743:29416): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340804.745:29417): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340804.782:29418): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340804.784:29419): pid=260885 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340804.786:29420): pid=260885 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340804.829:29421): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340804.829:29422): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340804.831:29423): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340804.895:29424): pid=260886 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340804.897:29425): pid=260886 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D63696E6465722D766F6C756D65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340804.898:29426): pid=260886 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340804.903:29427): pid=260886 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340805.490:29428): pid=260886 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340805.490:29429): pid=260886 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340805.493:29430): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260885 suid=0 rport=40294 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340805.494:29431): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340805.496:29432): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340805.497:29433): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340805.497:29434): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340805.498:29435): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340805.498:29436): pid=260882 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340805.511:29437): pid=260930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340805.513:29438): pid=260929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260930 suid=74 rport=40300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340805.513:29439): pid=260929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260930 suid=74 rport=40300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340805.588:29440): pid=260929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340805.588:29441): pid=260929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340805.616:29442): pid=260929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340805.617:29443): pid=260929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260930 suid=74 rport=40300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340805.618:29444): pid=260929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340805.619:29445): pid=260929 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=186 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340805.619:29445): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe75cdfaf0 a2=1 a3=0 items=0 ppid=39353 pid=260929 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=186 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340805.619:29445): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340805.620:29446): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340805.646:29447): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340805.648:29448): pid=260932 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340805.649:29449): pid=260932 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340805.692:29450): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340805.692:29451): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340805.694:29452): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340805.753:29453): pid=260933 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340805.753:29454): pid=260933 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520737461747573206F70656E737461636B2D63696E6465722D766F6C756D65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340805.755:29455): pid=260933 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340805.758:29456): pid=260933 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340806.335:29457): pid=260933 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340806.335:29458): pid=260933 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340806.337:29459): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340806.338:29460): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340806.338:29461): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260932 suid=0 rport=40300 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340806.338:29462): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340806.341:29463): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340806.341:29464): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340806.342:29465): pid=260929 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340806.367:29466): pid=260974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340806.368:29467): pid=260972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260974 suid=74 rport=40312 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340806.368:29468): pid=260972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=260974 suid=74 rport=40312 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340806.451:29469): pid=260972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340806.451:29470): pid=260972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340806.475:29471): pid=260972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340806.475:29472): pid=260972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260974 suid=74 rport=40312 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340806.477:29473): pid=260972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340806.478:29474): pid=260972 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=187 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340806.478:29474): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd86ffb500 a2=1 a3=0 items=0 ppid=39353 pid=260972 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=187 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340806.478:29474): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340806.480:29475): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340806.515:29476): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340806.516:29477): pid=260976 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340806.518:29478): pid=260976 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340806.560:29479): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340806.560:29480): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340806.563:29481): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340806.633:29482): pid=260977 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340806.633:29483): pid=260977 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D63696E6465722D6261636B7570 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340806.635:29484): pid=260977 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340806.638:29485): pid=260977 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340807.153:29486): pid=260977 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340807.153:29487): pid=260977 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340807.156:29488): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340807.156:29489): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340807.156:29490): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260976 suid=0 rport=40312 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340807.157:29491): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340807.159:29492): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340807.160:29493): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340807.161:29494): pid=260972 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=260972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340807.186:29495): pid=261043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340807.187:29496): pid=261041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=261043 suid=74 rport=40328 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340807.187:29497): pid=261041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=261043 suid=74 rport=40328 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340807.272:29498): pid=261041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340807.272:29499): pid=261041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340807.302:29500): pid=261041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340807.302:29501): pid=261041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=261043 suid=74 rport=40328 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340807.304:29502): pid=261041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340807.304:29503): pid=261041 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=188 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340807.304:29503): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe9aa01fc0 a2=1 a3=0 items=0 ppid=39353 pid=261041 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=188 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340807.304:29503): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340807.306:29504): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340807.359:29505): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340807.361:29506): pid=261065 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340807.363:29507): pid=261065 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340807.407:29508): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340807.407:29509): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340807.411:29510): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340807.480:29511): pid=261071 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340807.481:29512): pid=261071 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520737461747573206F70656E737461636B2D63696E6465722D6261636B7570 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340807.482:29513): pid=261071 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340807.486:29514): pid=261071 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340808.018:29515): pid=261071 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340808.019:29516): pid=261071 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340808.022:29517): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340808.022:29518): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.022:29519): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=261065 suid=0 rport=40328 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.022:29520): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340808.026:29521): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340808.026:29522): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.027:29523): pid=261041 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.053:29524): pid=261142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340808.054:29525): pid=261141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=261142 suid=74 rport=40338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340808.054:29526): pid=261141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=261142 suid=74 rport=40338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340808.139:29527): pid=261141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340808.139:29528): pid=261141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340808.170:29529): pid=261141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340808.170:29530): pid=261141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=261142 suid=74 rport=40338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340808.172:29531): pid=261141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340808.173:29532): pid=261141 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=189 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340808.173:29532): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd2983210 a2=1 a3=0 items=0 ppid=39353 pid=261141 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=189 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340808.173:29532): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340808.175:29533): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340808.206:29534): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.207:29535): pid=261144 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340808.209:29536): pid=261144 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340808.252:29537): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340808.252:29538): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.253:29539): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340808.320:29540): pid=261145 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340808.321:29541): pid=261145 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D6D616E696C612D7368617265 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340808.321:29542): pid=261145 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340808.326:29543): pid=261145 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340808.904:29544): pid=261145 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340808.904:29545): pid=261145 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.908:29546): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=261144 suid=0 rport=40338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.908:29547): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340808.911:29548): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340808.911:29549): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340808.912:29550): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340808.912:29551): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.912:29552): pid=261141 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340808.939:29553): pid=261186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340808.940:29554): pid=261185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=261186 suid=74 rport=40354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340808.941:29555): pid=261185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=261186 suid=74 rport=40354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340809.030:29556): pid=261185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340809.030:29557): pid=261185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340809.048:29558): pid=261185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340809.048:29559): pid=261185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=261186 suid=74 rport=40354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340809.050:29560): pid=261185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340809.050:29561): pid=261185 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=190 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340809.050:29561): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffda463900 a2=1 a3=0 items=0 ppid=39353 pid=261185 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=190 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340809.050:29561): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340809.052:29562): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340809.079:29563): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340809.081:29564): pid=261190 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340809.082:29565): pid=261190 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340809.126:29566): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340809.126:29567): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340809.128:29568): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340809.197:29569): pid=261191 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340809.198:29570): pid=261191 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520737461747573206F70656E737461636B2D6D616E696C612D7368617265 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340809.198:29571): pid=261191 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340809.202:29572): pid=261191 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340809.779:29573): pid=261191 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340809.779:29574): pid=261191 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340809.782:29575): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340809.782:29576): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340809.782:29577): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=261190 suid=0 rport=40354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340809.782:29578): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340809.786:29579): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340809.786:29580): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340809.787:29581): pid=261185 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=261185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340816.000:29582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.004:29583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.008:29584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.011:29585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.015:29586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.018:29587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.022:29588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.025:29589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.030:29590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340816.034:29591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.326:29592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.350:29593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.355:29594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.399:29595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.435:29596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.476:29597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.539:29598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.550:29599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.596:29600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340816.653:29601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340817.996:29602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340818.001:29603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340818.006:29604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340818.193:29605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340818.251:29606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340818.274:29607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781340819.989:29608): pid=253274 uid=0 auid=0 ses=96 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340819.990:29609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340820.026:29610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340820.996:29611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340821.001:29612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340821.006:29613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340821.010:29614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340821.015:29615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340821.328:29616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340821.362:29617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340821.378:29618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340821.471:29619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340821.551:29620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781340821.648:29621): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781340832.995:29622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340832.999:29623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340833.002:29624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340833.187:29625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340833.197:29626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340833.302:29627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340834.793:29628): pid=263368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=263368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340834.875:29629): pid=263367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=263368 suid=74 rport=52992 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340834.875:29630): pid=263367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=263368 suid=74 rport=52992 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340842.769:29631): pid=263367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=263368 suid=74 rport=52992 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340842.769:29632): pid=263367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=263368 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1781340842.770:29633): pid=263367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340842.771:29634): pid=263367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=263367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340842.771:29635): pid=263367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340846.992:29636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340846.996:29637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340846.999:29638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340847.003:29639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340847.007:29640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340847.009:29641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340847.018:29642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340847.021:29643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340847.023:29644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340847.025:29645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.202:29646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.243:29647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.309:29648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.366:29649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.393:29650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.459:29651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.498:29652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.509:29653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.534:29654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340847.560:29655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340848.998:29656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340849.002:29657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340849.007:29658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340849.158:29659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340849.208:29660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340849.289:29661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340849.831:29662): pid=264504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340849.833:29663): pid=264494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=264504 suid=74 rport=20892 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=66.132.186.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340849.834:29664): pid=264494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=264504 suid=74 rport=20892 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=66.132.186.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340850.086:29665): pid=264506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340850.087:29666): pid=264505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264506 suid=74 rport=41556 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340850.087:29667): pid=264505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264506 suid=74 rport=41556 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340850.174:29668): pid=264505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340850.175:29669): pid=264505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340850.194:29670): pid=264505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340850.194:29671): pid=264505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264506 suid=74 rport=41556 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340850.195:29672): pid=264505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340850.195:29673): pid=264505 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=191 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340850.195:29673): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7985b790 a2=1 a3=0 items=0 ppid=39353 pid=264505 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=191 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340850.195:29673): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340850.197:29674): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340850.259:29675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340850.309:29676): pid=264509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781340850.309:29677): pid=264509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781340850.310:29678): pid=264509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340850.311:29679): pid=264509 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=192 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340850.311:29679): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe96762590 a2=1 a3=0 items=0 ppid=1 pid=264509 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340850.311:29679): proctitle="(systemd)" type=USER_START msg=audit(1781340850.313:29680): pid=264509 uid=0 auid=0 ses=192 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340850.332:29681): prog-id=1467 op=LOAD type=SYSCALL msg=audit(1781340850.332:29681): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd654edf0 a2=90 a3=0 items=0 ppid=1 pid=264509 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340850.332:29681): proctitle="(systemd)" type=BPF msg=audit(1781340850.333:29682): prog-id=0 op=UNLOAD type=BPF msg=audit(1781340850.333:29683): prog-id=1468 op=LOAD type=SYSCALL msg=audit(1781340850.333:29683): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd654ee90 a2=90 a3=4 items=0 ppid=1 pid=264509 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340850.333:29683): proctitle="(systemd)" type=BPF msg=audit(1781340850.333:29684): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781340850.485:29685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340850.510:29686): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.511:29687): pid=264540 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340850.512:29688): pid=264540 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340850.556:29689): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340850.556:29690): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.558:29691): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340850.602:29692): pid=264541 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340850.603:29693): pid=264541 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6D6B646972202D70202F746D702F6F766E5F7374616E64616C6F6E655F636F6E76657273696F6E exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340850.603:29694): pid=264541 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340850.606:29695): pid=264541 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340850.609:29696): pid=264541 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340850.609:29697): pid=264541 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.612:29698): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264540 suid=0 rport=41556 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.613:29699): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340850.619:29700): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340850.620:29701): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340850.621:29702): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340850.621:29703): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.621:29704): pid=264505 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.642:29705): pid=264565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340850.644:29706): pid=264563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264565 suid=74 rport=41572 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340850.644:29707): pid=264563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264565 suid=74 rport=41572 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340850.719:29708): pid=264563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340850.720:29709): pid=264563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340850.749:29710): pid=264563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340850.750:29711): pid=264563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264565 suid=74 rport=41572 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340850.752:29712): pid=264563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340850.752:29713): pid=264563 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=193 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340850.752:29713): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc21c6fea0 a2=1 a3=0 items=0 ppid=39353 pid=264563 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=193 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340850.752:29713): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340850.754:29714): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340850.788:29715): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.790:29716): pid=264567 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340850.792:29717): pid=264567 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340850.835:29718): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340850.835:29719): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.837:29720): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340850.900:29721): pid=264568 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340850.900:29722): pid=264568 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6F767364622D746F6F6C20636C75737465722D746F2D7374616E64616C6F6E65202F746D702F6F766E5F7374616E64616C6F6E655F636F6E76657273696F6E2F6F766E6E625F64622E6462202F7661722F6C69622F6F70656E767377697463682F6F766E2F6F766E6E625F64622E6462 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340850.901:29723): pid=264568 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340850.905:29724): pid=264568 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340850.929:29725): pid=264568 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340850.929:29726): pid=264568 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.932:29727): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264567 suid=0 rport=41572 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.932:29728): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340850.934:29729): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340850.935:29730): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340850.936:29731): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340850.936:29732): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.936:29733): pid=264563 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340850.964:29734): pid=264584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340850.965:29735): pid=264583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264584 suid=74 rport=41574 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340850.965:29736): pid=264583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264584 suid=74 rport=41574 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340851.053:29737): pid=264583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.053:29738): pid=264583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340851.083:29739): pid=264583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.083:29740): pid=264583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264584 suid=74 rport=41574 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340851.087:29741): pid=264583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340851.087:29742): pid=264583 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=194 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340851.087:29742): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd6e7b1a50 a2=1 a3=0 items=0 ppid=39353 pid=264583 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=194 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340851.087:29742): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340851.089:29743): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340851.121:29744): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.123:29745): pid=264586 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264586 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340851.124:29746): pid=264586 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340851.167:29747): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340851.167:29748): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.170:29749): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264587 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340851.234:29750): pid=264587 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340851.234:29751): pid=264587 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6F767364622D746F6F6C20636C75737465722D746F2D7374616E64616C6F6E65202F746D702F6F766E5F7374616E64616C6F6E655F636F6E76657273696F6E2F6F766E73625F64622E6462202F7661722F6C69622F6F70656E767377697463682F6F766E2F6F766E73625F64622E6462 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340851.235:29752): pid=264587 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340851.239:29753): pid=264587 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340851.271:29754): pid=264587 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340851.271:29755): pid=264587 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.275:29756): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264586 suid=0 rport=41574 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.275:29757): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264586 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340851.278:29758): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340851.278:29759): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340851.279:29760): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340851.279:29761): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.280:29762): pid=264583 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.304:29763): pid=264603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340851.305:29764): pid=264602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264603 suid=74 rport=41582 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340851.306:29765): pid=264602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264603 suid=74 rport=41582 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340851.394:29766): pid=264602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.394:29767): pid=264602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340851.422:29768): pid=264602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.423:29769): pid=264602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264603 suid=74 rport=41582 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340851.425:29770): pid=264602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340851.425:29771): pid=264602 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=195 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340851.425:29771): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff06e60eb0 a2=1 a3=0 items=0 ppid=39353 pid=264602 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=195 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340851.425:29771): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340851.427:29772): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340851.447:29773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340851.451:29774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340851.454:29775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340851.478:29776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340851.490:29777): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.491:29778): pid=264650 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340851.493:29779): pid=264650 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340851.542:29780): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340851.542:29781): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.544:29782): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340851.591:29783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340851.607:29784): pid=264673 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340851.607:29785): pid=264673 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=63686D6F6420363434202F746D702F6F766E5F7374616E64616C6F6E655F636F6E76657273696F6E2F6F766E6E625F64622E6462202F746D702F6F766E5F7374616E64616C6F6E655F636F6E76657273696F6E2F6F766E73625F64622E6462 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340851.609:29786): pid=264673 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340851.613:29787): pid=264673 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340851.616:29788): pid=264673 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340851.617:29789): pid=264673 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.620:29790): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264650 suid=0 rport=41582 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.621:29791): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340851.624:29792): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340851.624:29793): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340851.635:29794): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340851.635:29795): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.635:29796): pid=264602 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.651:29797): pid=264724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340851.655:29798): pid=264722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264724 suid=74 rport=41588 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340851.655:29799): pid=264722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264724 suid=74 rport=41588 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340851.740:29800): pid=264722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.740:29801): pid=264722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340851.763:29802): pid=264722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.764:29803): pid=264722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264724 suid=74 rport=41588 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340851.766:29804): pid=264722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340851.766:29805): pid=264722 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=196 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340851.766:29805): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc494d1440 a2=1 a3=0 items=0 ppid=39353 pid=264722 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=196 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340851.766:29805): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340851.767:29806): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340851.768:29807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340851.792:29808): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.794:29809): pid=264772 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340851.795:29810): pid=264772 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340851.815:29811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781340851.839:29812): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340851.840:29813): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.842:29814): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340851.890:29815): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340851.891:29816): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.891:29817): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264772 suid=0 rport=41588 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340851.891:29818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.892:29819): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340851.899:29820): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340851.899:29821): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.900:29822): pid=264722 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340851.913:29823): pid=264795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1781340851.913:29824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781340851.914:29825): pid=264793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264795 suid=74 rport=41602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340851.914:29826): pid=264793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264795 suid=74 rport=41602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340851.988:29827): pid=264793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340851.988:29828): pid=264793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340852.018:29829): pid=264793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340852.019:29830): pid=264793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264795 suid=74 rport=41602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340852.021:29831): pid=264793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340852.022:29832): pid=264793 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=197 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340852.022:29832): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd99a9790 a2=1 a3=0 items=0 ppid=39353 pid=264793 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=197 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340852.022:29832): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340852.023:29833): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340852.052:29834): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.054:29835): pid=264797 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340852.055:29836): pid=264797 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340852.098:29837): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340852.098:29838): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.100:29839): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264798 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340852.112:29840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340852.140:29841): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264797 suid=0 rport=41602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.140:29842): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340852.143:29843): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340852.143:29844): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340852.143:29845): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340852.143:29846): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.143:29847): pid=264793 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.158:29848): pid=264812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340852.158:29849): pid=264811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264812 suid=74 rport=41614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340852.158:29850): pid=264811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=264812 suid=74 rport=41614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340852.233:29851): pid=264811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340852.234:29852): pid=264811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340852.263:29853): pid=264811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340852.263:29854): pid=264811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264812 suid=74 rport=41614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340852.265:29855): pid=264811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340852.265:29856): pid=264811 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=198 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340852.265:29856): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc61870cc0 a2=1 a3=0 items=0 ppid=39353 pid=264811 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=198 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340852.265:29856): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340852.267:29857): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340852.298:29858): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.299:29859): pid=264814 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340852.300:29860): pid=264814 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340852.343:29861): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340852.343:29862): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.345:29863): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340852.403:29864): pid=264815 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340852.404:29865): pid=264815 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=726D202D7266202F746D702F6F766E5F7374616E64616C6F6E655F636F6E76657273696F6E exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340852.405:29866): pid=264815 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340852.409:29867): pid=264815 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340852.412:29868): pid=264815 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340852.412:29869): pid=264815 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.415:29870): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264814 suid=0 rport=41614 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.415:29871): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340852.417:29872): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340852.418:29873): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340852.418:29874): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340852.418:29875): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340852.418:29876): pid=264811 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_DISP msg=audit(1781340862.495:29877): pid=264511 uid=0 auid=0 ses=192 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340862.498:29878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340862.540:29879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340864.000:29880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340864.004:29881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340864.008:29882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340864.269:29883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340864.282:29884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340864.342:29885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340864.874:29886): pid=264494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=264504 suid=74 rport=20892 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=66.132.186.195 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340864.876:29887): pid=264494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264504 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340864.876:29888): pid=264494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=264494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340864.877:29889): pid=264494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=66.132.186.195 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340873.276:29890): pid=266169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=266169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340873.278:29891): pid=266108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=266169 suid=74 rport=46424 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340873.278:29892): pid=266108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=266169 suid=74 rport=46424 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340875.560:29893): pid=266108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.004:29894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.008:29895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.012:29896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.015:29897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.019:29898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.022:29899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.026:29900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.029:29901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.033:29902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340878.037:29903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.323:29904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.421:29905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.430:29906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.466:29907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.472:29908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.518:29909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.543:29910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.564:29911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.610:29912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340878.742:29913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340879.992:29914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340879.995:29915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340879.998:29916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340880.094:29917): pid=266108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=266169 suid=74 rport=46424 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340880.095:29918): pid=266108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=266169 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340880.096:29919): pid=266108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=266108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340880.096:29920): pid=266108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340880.167:29921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340880.184:29922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340880.192:29923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340880.533:29924): pid=266963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=266963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340880.534:29925): pid=266867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=266963 suid=74 rport=46446 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340880.534:29926): pid=266867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=266963 suid=74 rport=46446 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781340881.992:29927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340881.996:29928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340882.000:29929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340882.005:29930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340882.157:29931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340882.394:29932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340882.400:29933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340882.445:29934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340882.515:29935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340882.785:29936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340885.333:29937): pid=266867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340888.302:29938): pid=267416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=267416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340888.304:29939): pid=267331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=267416 suid=74 rport=59080 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340888.304:29940): pid=267331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=267416 suid=74 rport=59080 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340888.546:29941): pid=266867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=266963 suid=74 rport=46446 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340888.547:29942): pid=266867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=266963 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340888.548:29943): pid=266867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=266867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340888.548:29944): pid=266867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340894.214:29945): pid=267331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340894.997:29946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340895.002:29947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340895.006:29948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340895.287:29949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340895.304:29950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340895.353:29951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340895.535:29952): pid=267978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=267978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340895.536:29953): pid=267869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=267978 suid=74 rport=40114 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340895.536:29954): pid=267869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=267978 suid=74 rport=40114 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340900.451:29955): pid=267331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=267416 suid=74 rport=59080 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340900.452:29956): pid=267331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=267416 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340900.452:29957): pid=267331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=267331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340900.452:29958): pid=267331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340903.136:29959): pid=268385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=268385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340903.138:29960): pid=268243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=268385 suid=74 rport=40198 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340903.138:29961): pid=268243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=268385 suid=74 rport=40198 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340903.853:29962): pid=267869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ftp" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340908.845:29963): pid=267869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=267978 suid=74 rport=40114 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340908.847:29964): pid=267869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=267978 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340908.848:29965): pid=267869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=267869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340908.848:29966): pid=267869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="ftp" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.876:29967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.881:29968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.884:29969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.887:29970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.891:29971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.893:29972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.896:29973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.899:29974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.902:29975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340908.906:29976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.153:29977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.163:29978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.207:29979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.282:29980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.362:29981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.451:29982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.570:29983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.579:29984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.667:29985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340909.778:29986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340910.435:29987): pid=269046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=269046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340910.436:29988): pid=268689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=269046 suid=74 rport=46902 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340910.437:29989): pid=268689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=269046 suid=74 rport=46902 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781340910.991:29990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340910.996:29991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340911.000:29992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340911.189:29993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340911.288:29994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340911.344:29995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340912.255:29996): pid=268243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340912.995:29997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340913.000:29998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340913.004:29999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340913.008:30000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340913.012:30001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340913.359:30002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340913.436:30003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340913.487:30004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340913.604:30005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340913.666:30006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340917.281:30007): pid=269584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=269584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340917.282:30008): pid=269425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=269584 suid=74 rport=60558 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340917.282:30009): pid=269425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=269584 suid=74 rport=60558 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340918.123:30010): pid=268243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=268385 suid=74 rport=40198 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340918.124:30011): pid=268243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=268385 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340918.125:30012): pid=268243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=268243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340918.125:30013): pid=268243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340920.435:30014): pid=268689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340923.992:30015): pid=268689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=269046 suid=74 rport=46902 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340923.992:30016): pid=268689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=269046 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340923.994:30017): pid=268689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=268689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340923.994:30018): pid=268689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340924.519:30019): pid=270042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340924.521:30020): pid=269922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=270042 suid=74 rport=39224 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340924.521:30021): pid=269922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=270042 suid=74 rport=39224 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781340926.000:30022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340926.004:30023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340926.006:30024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340926.219:30025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340926.235:30026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340926.276:30027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340926.810:30028): pid=269425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340931.907:30029): pid=270431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340931.909:30030): pid=270324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=270431 suid=74 rport=39256 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340931.909:30031): pid=270324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=270431 suid=74 rport=39256 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340932.432:30032): pid=269425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=269584 suid=74 rport=60558 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340932.433:30033): pid=269425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=269584 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340932.435:30034): pid=269425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=269425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340932.435:30035): pid=269425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340932.872:30036): pid=269922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340937.318:30037): pid=269922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=270042 suid=74 rport=39224 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340937.318:30038): pid=269922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270042 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340937.320:30039): pid=269922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=269922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340937.320:30040): pid=269922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340938.461:30041): pid=270982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340938.463:30042): pid=270872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=270982 suid=74 rport=44386 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340938.463:30043): pid=270872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=270982 suid=74 rport=44386 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781340940.001:30044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.006:30045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.011:30046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.015:30047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.020:30048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.024:30049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.028:30050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.032:30051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.036:30052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340940.041:30053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340940.104:30054): pid=270324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="cloud" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.318:30055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.381:30056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.434:30057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.442:30058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.468:30059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.484:30060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.491:30061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.528:30062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.542:30063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340940.676:30064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340941.309:30065): pid=271366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340941.311:30066): pid=271365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271366 suid=74 rport=51340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340941.311:30067): pid=271365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271366 suid=74 rport=51340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340941.397:30068): pid=271365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340941.397:30069): pid=271365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340941.430:30070): pid=271365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340941.431:30071): pid=271365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271366 suid=74 rport=51340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340941.433:30072): pid=271365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340941.433:30073): pid=271365 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=199 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340941.433:30073): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffede294940 a2=1 a3=0 items=0 ppid=39353 pid=271365 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=199 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340941.433:30073): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340941.435:30074): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340941.460:30075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340941.464:30076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340941.466:30077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340941.495:30078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340941.523:30079): pid=271394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781340941.523:30080): pid=271394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781340941.524:30081): pid=271394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340941.524:30082): pid=271394 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=200 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340941.524:30082): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe96762590 a2=1 a3=0 items=0 ppid=1 pid=271394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=200 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340941.524:30082): proctitle="(systemd)" type=USER_START msg=audit(1781340941.526:30083): pid=271394 uid=0 auid=0 ses=200 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340941.551:30084): prog-id=1469 op=LOAD type=SYSCALL msg=audit(1781340941.551:30084): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff3ecdb200 a2=90 a3=0 items=0 ppid=1 pid=271394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=200 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340941.551:30084): proctitle="(systemd)" type=BPF msg=audit(1781340941.552:30085): prog-id=0 op=UNLOAD type=BPF msg=audit(1781340941.552:30086): prog-id=1470 op=LOAD type=SYSCALL msg=audit(1781340941.552:30086): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff3ecdb2a0 a2=90 a3=4 items=0 ppid=1 pid=271394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=200 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340941.552:30086): proctitle="(systemd)" type=BPF msg=audit(1781340941.552:30087): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340941.654:30088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340941.711:30089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340941.733:30090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340941.733:30091): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340941.735:30092): pid=271452 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340941.737:30093): pid=271452 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340941.782:30094): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340941.782:30095): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340941.785:30096): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340941.824:30097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340941.854:30098): pid=271466 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340941.856:30099): pid=271466 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340941.856:30100): pid=271466 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340941.862:30101): pid=271466 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340941.876:30102): pid=271466 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340941.876:30103): pid=271466 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340941.879:30104): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340941.879:30105): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340941.880:30106): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271452 suid=0 rport=51340 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340941.881:30107): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340941.884:30108): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340941.885:30109): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340941.886:30110): pid=271365 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340943.482:30111): pid=271561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340943.484:30112): pid=271560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271561 suid=74 rport=44856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340943.484:30113): pid=271560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271561 suid=74 rport=44856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340943.576:30114): pid=271560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340943.576:30115): pid=271560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340943.606:30116): pid=271560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340943.607:30117): pid=271560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271561 suid=74 rport=44856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340943.609:30118): pid=271560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340943.610:30119): pid=271560 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=201 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340943.610:30119): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffca9686630 a2=1 a3=0 items=0 ppid=39353 pid=271560 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=201 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340943.610:30119): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340943.611:30120): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781340943.630:30121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340943.634:30122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340943.637:30123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340943.642:30124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340943.671:30125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340943.682:30126): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340943.683:30127): pid=271601 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340943.686:30128): pid=271601 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340943.730:30129): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340943.730:30130): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340943.734:30131): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340943.804:30132): pid=271615 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340943.804:30133): pid=271615 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363431206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340943.805:30134): pid=271615 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340943.810:30135): pid=271615 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=NETFILTER_CFG msg=audit(1781340943.817:30136): table=filter:6 family=1 entries=1 op=nft_register_rule pid=271650 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1781340943.817:30136): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7ffc69712220 a2=0 a3=7fb191f16bc4 items=0 ppid=271615 pid=271650 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=201 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340943.817:30136): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363431006374007374617465006E657700636F756E74657200616363657074 type=USER_END msg=audit(1781340943.818:30137): pid=271615 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340943.818:30138): pid=271615 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340943.822:30139): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271601 suid=0 rport=44856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340943.823:30140): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340943.826:30141): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340943.826:30142): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340943.827:30143): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340943.827:30144): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340943.827:30145): pid=271560 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340943.847:30146): pid=271668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340943.850:30147): pid=271663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271668 suid=74 rport=44858 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340943.850:30148): pid=271663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271668 suid=74 rport=44858 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340943.960:30149): pid=271663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340943.960:30150): pid=271663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340943.985:30151): pid=271663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340943.986:30152): pid=271663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271668 suid=74 rport=44858 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340943.987:30153): pid=271663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340943.987:30154): pid=271663 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=202 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340943.987:30154): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdfa8102e0 a2=1 a3=0 items=0 ppid=39353 pid=271663 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=202 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340943.987:30154): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340943.989:30155): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340943.994:30156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340944.012:30157): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340944.013:30158): pid=271746 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340944.014:30159): pid=271746 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340944.045:30160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781340944.058:30161): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340944.058:30162): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340944.062:30163): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340944.147:30164): pid=271751 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340944.148:30165): pid=271751 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363432206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340944.149:30166): pid=271751 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340944.149:30167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781340944.152:30168): pid=271751 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=NETFILTER_CFG msg=audit(1781340944.159:30169): table=filter:7 family=1 entries=1 op=nft_register_rule pid=271776 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft" type=SYSCALL msg=audit(1781340944.159:30169): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7fffb774ba40 a2=0 a3=7f4412f44bc4 items=0 ppid=271751 pid=271776 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=202 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340944.159:30169): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363432006374007374617465006E657700636F756E74657200616363657074 type=USER_END msg=audit(1781340944.160:30170): pid=271751 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340944.160:30171): pid=271751 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340944.163:30172): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271746 suid=0 rport=44858 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340944.163:30173): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340944.169:30174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340944.170:30175): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340944.170:30176): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340944.171:30177): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340944.171:30178): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340944.171:30179): pid=271663 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781340944.238:30180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340945.664:30181): pid=271819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340945.666:30182): pid=271494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=271819 suid=74 rport=48064 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340945.666:30183): pid=271494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=271819 suid=74 rport=48064 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340946.810:30184): pid=270324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=270431 suid=74 rport=39256 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340946.811:30185): pid=270324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270431 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340946.812:30186): pid=270324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340946.812:30187): pid=270324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340947.123:30188): pid=270872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="username" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340947.758:30189): pid=271928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340947.759:30190): pid=271927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271928 suid=74 rport=44874 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340947.759:30191): pid=271927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=271928 suid=74 rport=44874 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340947.852:30192): pid=271927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340947.852:30193): pid=271927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340947.880:30194): pid=271927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340947.881:30195): pid=271927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271928 suid=74 rport=44874 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340947.883:30196): pid=271927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340947.883:30197): pid=271927 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=203 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340947.883:30197): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5e30c3a0 a2=1 a3=0 items=0 ppid=39353 pid=271927 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=203 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340947.883:30197): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340947.885:30198): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340947.924:30199): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340947.926:30200): pid=271931 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340947.927:30201): pid=271931 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340947.971:30202): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340947.971:30203): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340947.976:30204): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340948.052:30205): pid=271954 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340948.052:30206): pid=271954 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340948.054:30207): pid=271954 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340948.061:30208): pid=271954 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340948.078:30209): pid=271954 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340948.079:30210): pid=271954 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_ACCT msg=audit(1781340948.120:30211): pid=271958 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340948.121:30212): pid=271958 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340948.122:30213): pid=271958 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340948.127:30214): pid=271958 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340948.276:30215): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340948.428:30216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_north_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340948.433:30217): pid=271958 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340948.433:30218): pid=271958 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340948.437:30219): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340948.437:30220): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340948.438:30221): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271931 suid=0 rport=44874 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340948.438:30222): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340948.442:30223): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340948.442:30224): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340948.443:30225): pid=271927 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340949.751:30226): pid=272244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340949.753:30227): pid=272243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272244 suid=74 rport=44878 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340949.753:30228): pid=272243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272244 suid=74 rport=44878 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340949.845:30229): pid=272243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340949.845:30230): pid=272243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340949.878:30231): pid=272243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340949.879:30232): pid=272243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272244 suid=74 rport=44878 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340949.881:30233): pid=272243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340949.882:30234): pid=272243 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=204 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340949.882:30234): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe6b1339c0 a2=1 a3=0 items=0 ppid=39353 pid=272243 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=204 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340949.882:30234): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340949.883:30235): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340949.917:30236): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340949.919:30237): pid=272247 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340949.921:30238): pid=272247 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340949.965:30239): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340949.965:30240): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340949.967:30241): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340950.031:30242): pid=272261 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340950.032:30243): pid=272261 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340950.032:30244): pid=272261 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340950.035:30245): pid=272261 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340950.049:30246): pid=272261 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340950.050:30247): pid=272261 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_ACCT msg=audit(1781340950.080:30248): pid=272264 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340950.081:30249): pid=272264 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340950.081:30250): pid=272264 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340950.085:30251): pid=272264 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781340950.212:30252): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781340950.341:30253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_south_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781340950.345:30254): pid=272264 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340950.345:30255): pid=272264 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340950.348:30256): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340950.348:30257): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340950.348:30258): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272247 suid=0 rport=44878 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340950.349:30259): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340950.351:30260): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340950.352:30261): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340950.353:30262): pid=272243 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340951.951:30263): pid=272369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340951.952:30264): pid=272368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272369 suid=74 rport=44882 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340951.953:30265): pid=272368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272369 suid=74 rport=44882 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340952.030:30266): pid=270872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=270982 suid=74 rport=44386 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340952.030:30267): pid=270872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270982 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340952.031:30268): pid=270872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=270872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340952.032:30269): pid=270872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340952.041:30270): pid=272368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340952.041:30271): pid=272368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340952.070:30272): pid=272368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340952.071:30273): pid=272368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272369 suid=74 rport=44882 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340952.074:30274): pid=272368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340952.075:30275): pid=272368 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=205 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340952.075:30275): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe7f403f20 a2=1 a3=0 items=0 ppid=39353 pid=272368 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=205 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340952.075:30275): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340952.077:30276): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_AUTH msg=audit(1781340952.079:30277): pid=271494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781340952.118:30278): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.120:30279): pid=272371 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340952.121:30280): pid=272371 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340952.166:30281): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340952.166:30282): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.168:30283): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340952.240:30284): pid=272372 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340952.241:30285): pid=272372 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=636174202F7661722F6C69622F636F6E6669672D646174612F7075707065742D67656E6572617465642F6B657973746F6E652F6574632F6B657973746F6E652F63726564656E7469616C2D6B6579732F30 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340952.242:30286): pid=272372 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340952.247:30287): pid=272372 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340952.251:30288): pid=272372 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340952.251:30289): pid=272372 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.255:30290): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272371 suid=0 rport=44882 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.255:30291): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340952.258:30292): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340952.259:30293): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340952.259:30294): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340952.259:30295): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.260:30296): pid=272368 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.278:30297): pid=272388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340952.279:30298): pid=272387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272388 suid=74 rport=44886 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340952.279:30299): pid=272387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272388 suid=74 rport=44886 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340952.294:30300): pid=272389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340952.295:30301): pid=272339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=272389 suid=74 rport=48082 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340952.295:30302): pid=272339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=272389 suid=74 rport=48082 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340952.364:30303): pid=272387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340952.364:30304): pid=272387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340952.394:30305): pid=272387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340952.395:30306): pid=272387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272388 suid=74 rport=44886 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340952.397:30307): pid=272387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340952.397:30308): pid=272387 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=206 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340952.397:30308): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc25d50e80 a2=1 a3=0 items=0 ppid=39353 pid=272387 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=206 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340952.397:30308): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340952.399:30309): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340952.429:30310): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.431:30311): pid=272415 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340952.432:30312): pid=272415 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340952.474:30313): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340952.474:30314): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.478:30315): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340952.544:30316): pid=272416 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340952.545:30317): pid=272416 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=636174202F7661722F6C69622F636F6E6669672D646174612F7075707065742D67656E6572617465642F6B657973746F6E652F6574632F6B657973746F6E652F63726564656E7469616C2D6B6579732F31 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340952.545:30318): pid=272416 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340952.549:30319): pid=272416 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340952.552:30320): pid=272416 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340952.553:30321): pid=272416 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.555:30322): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272415 suid=0 rport=44886 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.556:30323): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340952.558:30324): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340952.558:30325): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340952.559:30326): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340952.559:30327): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.560:30328): pid=272387 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.587:30329): pid=272432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340952.588:30330): pid=272431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272432 suid=74 rport=44900 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340952.589:30331): pid=272431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272432 suid=74 rport=44900 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340952.677:30332): pid=272431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340952.677:30333): pid=272431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340952.706:30334): pid=272431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340952.706:30335): pid=272431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272432 suid=74 rport=44900 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340952.708:30336): pid=272431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340952.708:30337): pid=272431 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=207 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340952.708:30337): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff224b3e60 a2=1 a3=0 items=0 ppid=39353 pid=272431 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340952.708:30337): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340952.710:30338): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340952.744:30339): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.745:30340): pid=272434 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340952.747:30341): pid=272434 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340952.789:30342): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340952.790:30343): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.791:30344): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340952.851:30345): pid=272435 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340952.852:30346): pid=272435 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=636174202F7661722F6C69622F636F6E6669672D646174612F7075707065742D67656E6572617465642F6B657973746F6E652F6574632F6B657973746F6E652F6665726E65742D6B6579732F30 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340952.853:30347): pid=272435 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340952.857:30348): pid=272435 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340952.860:30349): pid=272435 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340952.861:30350): pid=272435 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340952.863:30351): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340952.863:30352): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.863:30353): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272434 suid=0 rport=44900 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.863:30354): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340952.865:30355): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340952.866:30356): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.867:30357): pid=272431 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340952.898:30358): pid=272451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340952.899:30359): pid=272450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272451 suid=74 rport=44914 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340952.899:30360): pid=272450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=272451 suid=74 rport=44914 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340952.990:30361): pid=272450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340952.990:30362): pid=272450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781340953.022:30363): pid=272450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340953.023:30364): pid=272450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272451 suid=74 rport=44914 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781340953.026:30365): pid=272450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781340953.026:30366): pid=272450 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=208 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781340953.026:30366): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffff5dc4b0 a2=1 a3=0 items=0 ppid=39353 pid=272450 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=208 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781340953.026:30366): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781340953.028:30367): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340953.068:30368): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340953.070:30369): pid=272453 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781340953.071:30370): pid=272453 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781340953.114:30371): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781340953.114:30372): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340953.116:30373): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781340953.174:30374): pid=272454 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781340953.174:30375): pid=272454 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=636174202F7661722F6C69622F636F6E6669672D646174612F7075707065742D67656E6572617465642F6B657973746F6E652F6574632F6B657973746F6E652F6665726E65742D6B6579732F31 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781340953.175:30376): pid=272454 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781340953.178:30377): pid=272454 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340953.180:30378): pid=272454 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340953.180:30379): pid=272454 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781340953.184:30380): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272453 suid=0 rport=44914 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781340953.185:30381): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781340953.188:30382): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781340953.188:30383): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781340953.189:30384): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781340953.189:30385): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781340953.189:30386): pid=272450 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781340956.991:30387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340956.994:30388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340956.996:30389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340957.169:30390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340957.183:30391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340957.312:30392): pid=271494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=271819 suid=74 rport=48064 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340957.313:30393): pid=271494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271819 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340957.314:30394): pid=271494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=271494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340957.314:30395): pid=271494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340957.327:30396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340958.859:30397): pid=272842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340958.860:30398): pid=272728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=272842 suid=74 rport=53390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340958.860:30399): pid=272728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=272842 suid=74 rport=53390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340959.639:30400): pid=272339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781340963.245:30401): pid=271401 uid=0 auid=0 ses=200 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781340963.248:30402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340963.276:30403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340965.767:30404): pid=273334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=273334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340965.769:30405): pid=273114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=273334 suid=74 rport=57380 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340965.769:30406): pid=273114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=273334 suid=74 rport=57380 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340965.777:30407): pid=272339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272389 suid=74 rport=48082 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340965.778:30408): pid=272339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272389 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340965.778:30409): pid=272339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340965.778:30410): pid=272339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340966.747:30411): pid=272728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user1" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.001:30412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.005:30413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.008:30414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.012:30415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.015:30416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.017:30417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.021:30418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.024:30419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.026:30420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.030:30421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.307:30422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.315:30423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340971.329:30424): pid=272728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272842 suid=74 rport=53390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340971.331:30425): pid=272728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272842 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340971.332:30426): pid=272728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=272728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340971.332:30427): pid=272728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.383:30428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.396:30429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340971.407:30430): pid=273745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=273745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340971.425:30431): pid=273426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=273745 suid=74 rport=57430 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340971.426:30432): pid=273426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=273745 suid=74 rport=57430 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781340971.505:30433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.564:30434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.585:30435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.610:30436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.622:30437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.670:30438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.687:30439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.826:30440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340971.831:30441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340971.832:30442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340972.015:30443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340972.106:30444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340974.363:30445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340974.367:30446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340974.372:30447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340974.379:30448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340974.385:30449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340974.392:30450): pid=273114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="testuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340974.748:30451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340974.811:30452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340974.851:30453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340974.912:30454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340975.047:30455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340978.029:30456): pid=273114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=273334 suid=74 rport=57380 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340978.031:30457): pid=273114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=273334 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340978.031:30458): pid=273114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=273114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340978.032:30459): pid=273114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340978.946:30460): pid=273426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test3" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340979.505:30461): pid=274494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=274494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340979.507:30462): pid=274411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=274494 suid=74 rport=44976 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340979.507:30463): pid=274411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=274494 suid=74 rport=44976 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340983.360:30464): pid=273426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=273745 suid=74 rport=57430 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340983.361:30465): pid=273426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=273745 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340983.362:30466): pid=273426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=273426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340983.362:30467): pid=273426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340983.553:30468): pid=274411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340987.021:30469): pid=274823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=274823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340987.023:30470): pid=274806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=274823 suid=74 rport=46088 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340987.023:30471): pid=274806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=274823 suid=74 rport=46088 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340987.768:30472): pid=274411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=274494 suid=74 rport=44976 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340987.768:30473): pid=274411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=274494 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340987.769:30474): pid=274411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=274411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340987.769:30475): pid=274411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340987.785:30476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340987.789:30477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781340987.794:30478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340988.016:30479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340988.063:30480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781340988.099:30481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781340989.170:30482): pid=274806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340992.430:30483): pid=274806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=274823 suid=74 rport=46088 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340992.430:30484): pid=274806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=274823 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340992.432:30485): pid=274806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=274806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340992.432:30486): pid=274806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340994.061:30487): pid=275454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=275454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781340994.167:30488): pid=275449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=275454 suid=74 rport=53924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781340994.167:30489): pid=275449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=275454 suid=74 rport=53924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781340994.593:30490): pid=275449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781340997.764:30491): pid=275449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=275454 suid=74 rport=53924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340997.765:30492): pid=275449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=275454 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781340997.767:30493): pid=275449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=275449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781340997.767:30494): pid=275449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341001.353:30495): pid=275826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=275826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341001.496:30496): pid=275825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=275826 suid=74 rport=53958 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341001.496:30497): pid=275825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=275826 suid=74 rport=53958 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341001.978:30498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341001.983:30499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341001.986:30500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341001.991:30501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341001.995:30502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341001.999:30503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341002.007:30504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341002.012:30505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341002.016:30506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341002.021:30507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341002.023:30508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341002.029:30509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341002.135:30510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341002.236:30511): pid=275825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="reza" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.315:30512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.645:30513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.659:30514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.667:30515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.676:30516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.757:30517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.776:30518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.806:30519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.829:30520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.862:30521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.915:30522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341002.943:30523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341003.005:30524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341004.993:30525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341004.997:30526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341005.001:30527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341005.004:30528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341005.082:30529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341005.350:30530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341005.386:30531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341005.448:30532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341005.479:30533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341005.515:30534): pid=275825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=275826 suid=74 rport=53958 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341005.516:30535): pid=275825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=275826 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341005.518:30536): pid=275825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=275825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341005.518:30537): pid=275825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341005.599:30538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341008.110:30539): pid=276655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=276655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341008.111:30540): pid=276633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=276655 suid=74 rport=47364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341008.111:30541): pid=276633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=276655 suid=74 rport=47364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341010.132:30542): pid=276633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341012.108:30543): pid=276633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=276655 suid=74 rport=47364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341012.108:30544): pid=276633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=276655 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341012.110:30545): pid=276633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=276633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341012.110:30546): pid=276633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341015.216:30547): pid=277055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341015.217:30548): pid=277046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=277055 suid=74 rport=40222 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341015.218:30549): pid=277046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=277055 suid=74 rport=40222 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341016.570:30550): pid=277046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341018.995:30551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341018.999:30552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341019.003:30553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341019.274:30554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341019.294:30555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341019.339:30556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341020.507:30557): pid=277046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=277055 suid=74 rport=40222 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341020.508:30558): pid=277046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277055 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341020.509:30559): pid=277046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341020.509:30560): pid=277046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341021.681:30561): pid=277473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341021.683:30562): pid=277449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=277473 suid=74 rport=40306 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341021.683:30563): pid=277449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=277473 suid=74 rport=40306 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341024.215:30564): pid=277449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="arthur" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341028.205:30565): pid=277838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341028.206:30566): pid=277833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=277838 suid=74 rport=60382 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341028.207:30567): pid=277833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=277838 suid=74 rport=60382 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341028.280:30568): pid=277449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=277473 suid=74 rport=40306 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341028.280:30569): pid=277449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277473 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341028.282:30570): pid=277449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341028.282:30571): pid=277449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341030.012:30572): pid=277833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="appuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341032.950:30573): pid=277833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=277838 suid=74 rport=60382 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341032.951:30574): pid=277833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277838 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341032.952:30575): pid=277833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=277833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341032.952:30576): pid=277833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341032.982:30577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341032.986:30578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341032.990:30579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341032.994:30580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.000:30581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.005:30582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.010:30583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.016:30584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.019:30585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.022:30586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.027:30587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.031:30588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341033.051:30589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.246:30590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.353:30591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.434:30592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.455:30593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.489:30594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.537:30595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.576:30596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.619:30597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.668:30598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.702:30599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.731:30600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.741:30601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341033.822:30602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341034.883:30603): pid=278457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=278457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341034.885:30604): pid=278448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=278457 suid=74 rport=47714 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341034.885:30605): pid=278448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=278457 suid=74 rport=47714 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341035.714:30606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341035.717:30607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341035.719:30608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341035.722:30609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341035.726:30610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341035.863:30611): pid=278448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341036.049:30612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341036.116:30613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341036.139:30614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341036.167:30615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341036.353:30616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341038.921:30617): pid=278448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=278457 suid=74 rport=47714 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341038.921:30618): pid=278448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=278457 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341038.922:30619): pid=278448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=278448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341038.922:30620): pid=278448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341042.346:30621): pid=279069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=279069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341042.348:30622): pid=279068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=279069 suid=74 rport=47758 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341042.348:30623): pid=279068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=279069 suid=74 rport=47758 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341043.796:30624): pid=279068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="home" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341046.952:30625): pid=279068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=279069 suid=74 rport=47758 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341046.953:30626): pid=279068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=279069 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341046.954:30627): pid=279068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=279068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341046.954:30628): pid=279068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341049.051:30629): pid=279314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=279314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341049.158:30630): pid=279305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=279314 suid=74 rport=56166 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341049.158:30631): pid=279305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=279314 suid=74 rport=56166 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341050.030:30632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341050.034:30633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341050.038:30634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341050.234:30635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341050.352:30636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341050.370:30637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341050.423:30638): pid=279305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user3" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341053.699:30639): pid=279305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=279314 suid=74 rport=56166 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341053.700:30640): pid=279305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=279314 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341053.701:30641): pid=279305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=279305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341053.701:30642): pid=279305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341055.679:30643): pid=280010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=280010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341055.681:30644): pid=280009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=280010 suid=74 rport=60874 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341055.681:30645): pid=280009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=280010 suid=74 rport=60874 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341057.349:30646): pid=280009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341061.379:30647): pid=280009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=280010 suid=74 rport=60874 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341061.380:30648): pid=280009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=280010 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341061.381:30649): pid=280009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=280009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341061.381:30650): pid=280009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341062.459:30651): pid=280290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=280290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341062.460:30652): pid=280281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=280290 suid=74 rport=60914 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341062.460:30653): pid=280281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=280290 suid=74 rport=60914 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341063.591:30654): pid=280281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341063.999:30655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.003:30656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.006:30657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.009:30658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.012:30659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.014:30660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.017:30661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.020:30662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.023:30663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.026:30664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.029:30665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.033:30666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341064.039:30667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.256:30668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.334:30669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.386:30670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.396:30671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.447:30672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.466:30673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.521:30674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.541:30675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.572:30676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.588:30677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.608:30678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.654:30679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341064.711:30680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341066.993:30681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341066.996:30682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341067.000:30683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341067.003:30684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341067.007:30685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341067.317:30686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341067.378:30687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341067.398:30688): pid=280281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=280290 suid=74 rport=60914 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341067.399:30689): pid=280281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=280290 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341067.400:30690): pid=280281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=280281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341067.400:30691): pid=280281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341067.512:30692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341067.546:30693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341067.700:30694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341069.123:30695): pid=281195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341069.124:30696): pid=281194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=281195 suid=74 rport=39290 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341069.124:30697): pid=281194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=281195 suid=74 rport=39290 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341069.665:30698): pid=281194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="dev" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341074.557:30699): pid=281194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=281195 suid=74 rport=39290 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341074.557:30700): pid=281194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281195 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341074.559:30701): pid=281194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341074.559:30702): pid=281194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341075.851:30703): pid=281507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341075.852:30704): pid=281494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=281507 suid=74 rport=42648 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341075.853:30705): pid=281494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=281507 suid=74 rport=42648 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341077.162:30706): pid=281494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341079.336:30707): pid=281494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=281507 suid=74 rport=42648 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341079.337:30708): pid=281494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281507 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341079.339:30709): pid=281494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341079.339:30710): pid=281494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341080.994:30711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341081.000:30712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341081.003:30713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341081.179:30714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341081.189:30715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341081.266:30716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341082.249:30717): pid=281978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341082.255:30718): pid=281963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=281978 suid=74 rport=42714 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341082.255:30719): pid=281963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=281978 suid=74 rport=42714 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341083.529:30720): pid=281963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="postgres" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341086.514:30721): pid=281963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=281978 suid=74 rport=42714 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341086.515:30722): pid=281963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281978 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341086.516:30723): pid=281963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=281963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341086.516:30724): pid=281963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341088.989:30725): pid=282279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=282279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341089.093:30726): pid=282278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=282279 suid=74 rport=57972 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341089.093:30727): pid=282278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=282279 suid=74 rport=57972 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341089.775:30728): pid=282278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341093.051:30729): pid=282278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=282279 suid=74 rport=57972 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341093.052:30730): pid=282278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=282279 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341093.053:30731): pid=282278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=282278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341093.053:30732): pid=282278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.000:30733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.005:30734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.008:30735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.013:30736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.017:30737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.021:30738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.024:30739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.028:30740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.032:30741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.036:30742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.040:30743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.044:30744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341095.047:30745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.324:30746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.370:30747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.380:30748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.397:30749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.458:30750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.475:30751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.524:30752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.632:30753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.656:30754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.681:30755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.701:30756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.770:30757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341095.792:30758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341097.993:30759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341097.996:30760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341097.998:30761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341098.000:30762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341098.003:30763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341098.314:30764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341098.392:30765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341098.476:30766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341098.539:30767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341098.633:30768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341100.548:30769): pid=283401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341100.665:30770): pid=283396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=283401 suid=74 rport=51602 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341100.665:30771): pid=283396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=283401 suid=74 rport=51602 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341101.888:30772): pid=283396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341102.139:30773): pid=283491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341102.140:30774): pid=283487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=283491 suid=74 rport=51628 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341102.141:30775): pid=283487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=283491 suid=74 rport=51628 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341104.036:30776): pid=283487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341105.778:30777): pid=283396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=283401 suid=74 rport=51602 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341105.778:30778): pid=283396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283401 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341105.779:30779): pid=283396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341105.779:30780): pid=283396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341108.049:30781): pid=283487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=283491 suid=74 rport=51628 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341108.050:30782): pid=283487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283491 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341108.051:30783): pid=283487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283487 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341108.051:30784): pid=283487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341108.946:30785): pid=283746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341108.947:30786): pid=283737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=283746 suid=74 rport=59054 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341108.947:30787): pid=283737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=283746 suid=74 rport=59054 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341110.336:30788): pid=283737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341112.001:30789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341112.005:30790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341112.009:30791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341112.108:30792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341112.222:30793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341112.258:30794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341113.795:30795): pid=283737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=283746 suid=74 rport=59054 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341113.795:30796): pid=283737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283746 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341113.796:30797): pid=283737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=283737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341113.797:30798): pid=283737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341115.514:30799): pid=284431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=284431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341115.515:30800): pid=284391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=284431 suid=74 rport=48806 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341115.516:30801): pid=284391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=284431 suid=74 rport=48806 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341117.244:30802): pid=284391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341120.706:30803): pid=284391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=284431 suid=74 rport=48806 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341120.707:30804): pid=284391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=284431 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341120.708:30805): pid=284391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=284391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341120.708:30806): pid=284391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341121.819:30807): pid=284701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=284701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341121.821:30808): pid=284647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=284701 suid=74 rport=48834 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341121.821:30809): pid=284647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=284701 suid=74 rport=48834 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341123.886:30810): pid=284647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ec2-user" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341125.998:30811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.002:30812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.005:30813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.008:30814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.012:30815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.015:30816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.019:30817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.022:30818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.025:30819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.030:30820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.033:30821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.039:30822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341126.051:30823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.208:30824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.371:30825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.387:30826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.408:30827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.509:30828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.547:30829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.552:30830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.601:30831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.684:30832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.701:30833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341126.709:30834): pid=284647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=284701 suid=74 rport=48834 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341126.710:30835): pid=284647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=284701 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341126.711:30836): pid=284647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=284647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341126.711:30837): pid=284647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.758:30838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341126.947:30839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341127.126:30840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341128.726:30841): pid=285447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=285447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341128.727:30842): pid=285438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=285447 suid=74 rport=54920 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341128.728:30843): pid=285438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=285447 suid=74 rport=54920 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341128.992:30844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341128.995:30845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341128.997:30846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341129.002:30847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341129.006:30848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341129.413:30849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341129.482:30850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341129.558:30851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341129.615:30852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341129.651:30853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341129.696:30854): pid=285438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="debian" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341132.719:30855): pid=285438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=285447 suid=74 rport=54920 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341132.721:30856): pid=285438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=285447 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341132.722:30857): pid=285438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=285438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341132.722:30858): pid=285438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341135.457:30859): pid=285919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=285919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341136.036:30860): pid=285870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=285919 suid=74 rport=51048 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341136.036:30861): pid=285870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=285919 suid=74 rport=51048 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341136.698:30862): pid=285870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="student" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341140.520:30863): pid=285870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=285919 suid=74 rport=51048 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341140.520:30864): pid=285870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=285919 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341140.521:30865): pid=285870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=285870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341140.521:30866): pid=285870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341142.167:30867): pid=286378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=286378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341142.168:30868): pid=286320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=286378 suid=74 rport=51144 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341142.168:30869): pid=286320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=286378 suid=74 rport=51144 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341142.621:30870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341142.624:30871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341142.628:30872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341142.717:30873): pid=286320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gabriel" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341142.757:30874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341142.945:30875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341142.967:30876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341146.171:30877): pid=286320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=286378 suid=74 rport=51144 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341146.171:30878): pid=286320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=286378 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341146.172:30879): pid=286320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=286320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341146.173:30880): pid=286320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341148.599:30881): pid=286706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=286706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341148.976:30882): pid=286705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=286706 suid=74 rport=41390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341148.976:30883): pid=286705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=286706 suid=74 rport=41390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341150.022:30884): pid=286705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="alex" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341153.040:30885): pid=286705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=286706 suid=74 rport=41390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341153.041:30886): pid=286705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=286706 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341153.043:30887): pid=286705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=286705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341153.043:30888): pid=286705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341155.146:30889): pid=287083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=287083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341155.147:30890): pid=287073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=287083 suid=74 rport=56380 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341155.147:30891): pid=287073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=287083 suid=74 rport=56380 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341156.578:30892): pid=287073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.000:30893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.005:30894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.008:30895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.011:30896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.015:30897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.019:30898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.023:30899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.029:30900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.035:30901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.039:30902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.043:30903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.047:30904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341157.156:30905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.437:30906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.456:30907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.502:30908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.547:30909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.565:30910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.575:30911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.591:30912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.601:30913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.617:30914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.658:30915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.684:30916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.718:30917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341157.735:30918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341158.628:30919): pid=287073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=287083 suid=74 rport=56380 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341158.629:30920): pid=287073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=287083 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341158.630:30921): pid=287073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=287073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341158.631:30922): pid=287073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341159.993:30923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341159.996:30924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341159.998:30925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341160.001:30926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341160.006:30927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341160.339:30928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341160.368:30929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341160.392:30930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341160.448:30931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341160.621:30932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341161.727:30933): pid=287863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=287863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341161.728:30934): pid=287862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=287863 suid=74 rport=56438 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341161.729:30935): pid=287862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=287863 suid=74 rport=56438 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341162.872:30936): pid=287862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341166.672:30937): pid=287862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=287863 suid=74 rport=56438 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341166.673:30938): pid=287862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=287863 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341166.674:30939): pid=287862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=287862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341166.674:30940): pid=287862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341168.103:30941): pid=288204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341168.104:30942): pid=288170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=288204 suid=74 rport=44960 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341168.104:30943): pid=288170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=288204 suid=74 rport=44960 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341169.193:30944): pid=288170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ai" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341171.567:30945): pid=288170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=288204 suid=74 rport=44960 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341171.567:30946): pid=288170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288204 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341171.569:30947): pid=288170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341171.569:30948): pid=288170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341172.988:30949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341172.990:30950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341172.994:30951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341173.105:30952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341173.182:30953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341173.277:30954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341174.454:30955): pid=288750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341174.455:30956): pid=288747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=288750 suid=74 rport=48180 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341174.455:30957): pid=288747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=288750 suid=74 rport=48180 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341175.491:30958): pid=288747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341179.283:30959): pid=288747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=288750 suid=74 rport=48180 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341179.283:30960): pid=288747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288750 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341179.285:30961): pid=288747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341179.285:30962): pid=288747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341180.366:30963): pid=288989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341180.367:30964): pid=288988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=288989 suid=74 rport=51928 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341180.367:30965): pid=288988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=288989 suid=74 rport=51928 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341180.457:30966): pid=288988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341180.457:30967): pid=288988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341180.488:30968): pid=288988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341180.488:30969): pid=288988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=288989 suid=74 rport=51928 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341180.490:30970): pid=288988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341180.491:30971): pid=288988 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=209 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341180.491:30971): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec559ffc0 a2=1 a3=0 items=0 ppid=39353 pid=288988 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=209 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341180.491:30971): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341180.492:30972): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781341180.550:30973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341180.594:30974): pid=288993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781341180.594:30975): pid=288993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781341180.595:30976): pid=288993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341180.596:30977): pid=288993 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=210 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341180.596:30977): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe96762590 a2=1 a3=0 items=0 ppid=1 pid=288993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=210 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341180.596:30977): proctitle="(systemd)" type=USER_START msg=audit(1781341180.599:30978): pid=288993 uid=0 auid=0 ses=210 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341180.625:30979): prog-id=1471 op=LOAD type=SYSCALL msg=audit(1781341180.625:30979): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff80774f00 a2=90 a3=0 items=0 ppid=1 pid=288993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=210 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341180.625:30979): proctitle="(systemd)" type=BPF msg=audit(1781341180.626:30980): prog-id=0 op=UNLOAD type=BPF msg=audit(1781341180.626:30981): prog-id=1472 op=LOAD type=SYSCALL msg=audit(1781341180.626:30981): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff80774fa0 a2=90 a3=4 items=0 ppid=1 pid=288993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=210 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341180.626:30981): proctitle="(systemd)" type=BPF msg=audit(1781341180.627:30982): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1781341180.771:30983): pid=289007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341180.774:30984): pid=288994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=289007 suid=74 rport=48222 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341180.774:30985): pid=288994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=289007 suid=74 rport=48222 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341180.842:30986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781341180.858:30987): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341180.859:30988): pid=289030 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341180.861:30989): pid=289030 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341180.905:30990): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341180.905:30991): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341180.907:30992): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341180.972:30993): pid=289035 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341180.972:30994): pid=289035 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=636174202F7661722F6C69622F636F6E6669672D646174612F7075707065742D67656E6572617465642F73776966742F6574632F73776966742F73776966742E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341180.972:30995): pid=289035 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341180.976:30996): pid=289035 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341180.978:30997): pid=289035 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341180.979:30998): pid=289035 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341180.982:30999): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289030 suid=0 rport=51928 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341180.983:31000): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341180.985:31001): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341180.985:31002): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341180.986:31003): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341180.986:31004): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341180.986:31005): pid=288988 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.382:31006): pid=289051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341181.384:31007): pid=289050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289051 suid=74 rport=51938 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341181.385:31008): pid=289050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289051 suid=74 rport=51938 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341181.465:31009): pid=289050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341181.466:31010): pid=289050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341181.495:31011): pid=289050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341181.496:31012): pid=289050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289051 suid=74 rport=51938 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341181.497:31013): pid=289050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341181.498:31014): pid=289050 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=211 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341181.498:31014): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc914cdd00 a2=1 a3=0 items=0 ppid=39353 pid=289050 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=211 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341181.498:31014): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341181.499:31015): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341181.533:31016): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.534:31017): pid=289106 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341181.536:31018): pid=289106 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341181.579:31019): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341181.579:31020): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.585:31021): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.634:31022): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289106 suid=0 rport=51938 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.634:31023): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341181.637:31024): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341181.638:31025): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341181.639:31026): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341181.639:31027): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.639:31028): pid=289050 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.660:31029): pid=289129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341181.661:31030): pid=289128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289129 suid=74 rport=51952 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341181.661:31031): pid=289128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289129 suid=74 rport=51952 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341181.741:31032): pid=289128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341181.741:31033): pid=289128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341181.769:31034): pid=289128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341181.769:31035): pid=289128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289129 suid=74 rport=51952 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341181.771:31036): pid=289128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341181.772:31037): pid=289128 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=212 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341181.772:31037): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf57d3ac0 a2=1 a3=0 items=0 ppid=39353 pid=289128 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=212 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341181.772:31037): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341181.773:31038): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341181.807:31039): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.809:31040): pid=289131 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289131 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341181.810:31041): pid=289131 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341181.853:31042): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341181.853:31043): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.855:31044): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.886:31045): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289131 suid=0 rport=51952 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.889:31046): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289131 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341181.891:31047): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341181.891:31048): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341181.892:31049): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341181.892:31050): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.892:31051): pid=289128 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341181.914:31052): pid=289170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341181.915:31053): pid=289168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289170 suid=74 rport=51962 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341181.915:31054): pid=289168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289170 suid=74 rport=51962 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341182.002:31055): pid=289168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341182.002:31056): pid=289168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341182.031:31057): pid=289168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341182.031:31058): pid=289168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289170 suid=74 rport=51962 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341182.034:31059): pid=289168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341182.034:31060): pid=289168 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=213 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341182.034:31060): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd6ea57680 a2=1 a3=0 items=0 ppid=39353 pid=289168 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=213 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341182.034:31060): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341182.035:31061): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341182.063:31062): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.065:31063): pid=289172 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341182.067:31064): pid=289172 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341182.111:31065): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341182.111:31066): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.113:31067): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341182.146:31068): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341182.146:31069): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.146:31070): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289172 suid=0 rport=51962 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.148:31071): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341182.151:31072): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341182.152:31073): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.153:31074): pid=289168 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.184:31075): pid=289188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341182.185:31076): pid=289187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289188 suid=74 rport=51972 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341182.185:31077): pid=289187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=289188 suid=74 rport=51972 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341182.280:31078): pid=289187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341182.280:31079): pid=289187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341182.310:31080): pid=289187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341182.310:31081): pid=289187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289188 suid=74 rport=51972 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341182.313:31082): pid=289187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341182.313:31083): pid=289187 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=214 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341182.313:31083): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4a4448c0 a2=1 a3=0 items=0 ppid=39353 pid=289187 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=214 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341182.313:31083): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341182.315:31084): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341182.345:31085): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.346:31086): pid=289208 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341182.348:31087): pid=289208 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341182.391:31088): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341182.391:31089): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.393:31090): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.424:31091): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289208 suid=0 rport=51972 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.425:31092): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341182.427:31093): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341182.428:31094): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341182.429:31095): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341182.429:31096): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341182.430:31097): pid=289187 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781341182.753:31098): pid=288994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gabriel" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341186.170:31099): pid=288994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289007 suid=74 rport=48222 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341186.170:31100): pid=288994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289007 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341186.171:31101): pid=288994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=288994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341186.171:31102): pid=288994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341187.565:31103): pid=289645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341187.566:31104): pid=289644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=289645 suid=74 rport=45836 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341187.566:31105): pid=289644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=289645 suid=74 rport=45836 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341188.006:31106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.011:31107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.015:31108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.019:31109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.023:31110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.029:31111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.033:31112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.037:31113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.042:31114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.047:31115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.051:31116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.054:31117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341188.057:31118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.292:31119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.310:31120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.374:31121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.500:31122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.518:31123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.545:31124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.563:31125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.593:31126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.613:31127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.662:31128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.702:31129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.803:31130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341188.994:31131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341189.349:31132): pid=289644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="appuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341190.999:31133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341191.004:31134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341191.008:31135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341191.013:31136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341191.017:31137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341191.338:31138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341191.415:31139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341191.425:31140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341191.541:31141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341191.597:31142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781341192.489:31143): pid=288996 uid=0 auid=0 ses=210 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781341192.492:31144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341192.526:31145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341192.929:31146): pid=289644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289645 suid=74 rport=45836 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341192.930:31147): pid=289644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289645 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341192.931:31148): pid=289644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=289644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341192.931:31149): pid=289644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341194.177:31150): pid=290337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=290337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341194.179:31151): pid=290335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=290337 suid=74 rport=54850 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341194.179:31152): pid=290335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=290337 suid=74 rport=54850 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341195.795:31153): pid=290335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341199.599:31154): pid=290335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=290337 suid=74 rport=54850 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341199.600:31155): pid=290335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=290337 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341199.602:31156): pid=290335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=290335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341199.602:31157): pid=290335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341201.102:31158): pid=290776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=290776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341201.125:31159): pid=290775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=290776 suid=74 rport=54884 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341201.125:31160): pid=290775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=290776 suid=74 rport=54884 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1781341201.241:31161): pid=290777 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=CRED_ACQ msg=audit(1781341201.241:31162): pid=290777 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=USER_START msg=audit(1781341201.242:31163): pid=290777 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=CRED_REFR msg=audit(1781341201.243:31164): pid=290777 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=USER_AUTH msg=audit(1781341201.969:31165): pid=290775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sam" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341203.989:31166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341203.992:31167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341203.995:31168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341204.189:31169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341204.300:31170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341204.365:31171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341206.097:31172): pid=290775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=290776 suid=74 rport=54884 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341206.098:31173): pid=290775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=290776 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341206.099:31174): pid=290775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=290775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341206.099:31175): pid=290775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341207.083:31176): pid=291212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=291212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341207.085:31177): pid=291211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=291212 suid=74 rport=59694 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341207.085:31178): pid=291211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=291212 suid=74 rport=59694 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341208.673:31179): pid=291211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="debian" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341211.713:31180): pid=291211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=291212 suid=74 rport=59694 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341211.713:31181): pid=291211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=291212 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341211.715:31182): pid=291211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=291211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341211.715:31183): pid=291211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341213.784:31184): pid=291540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=291540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341213.904:31185): pid=291535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=291540 suid=74 rport=44620 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341213.904:31186): pid=291535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=291540 suid=74 rport=44620 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341214.422:31187): pid=291535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="openvpn" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341216.548:31188): pid=291535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=291540 suid=74 rport=44620 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341216.549:31189): pid=291535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=291540 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341216.551:31190): pid=291535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=291535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341216.551:31191): pid=291535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.001:31192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.006:31193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.011:31194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.016:31195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.022:31196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.025:31197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.029:31198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.033:31199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.038:31200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.042:31201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.044:31202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.048:31203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341219.057:31204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.255:31205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.455:31206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.474:31207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.482:31208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.526:31209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.534:31210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.553:31211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.581:31212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.649:31213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.717:31214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.739:31215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.764:31216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341219.805:31217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341220.098:31218): pid=292177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=292177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341220.163:31219): pid=292163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=292177 suid=74 rport=44672 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341220.164:31220): pid=292163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=292177 suid=74 rport=44672 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341220.631:31221): pid=292163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="teamspeak" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341221.996:31222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341222.001:31223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341222.006:31224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341222.011:31225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341222.016:31226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341222.338:31227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341222.352:31228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341222.415:31229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341222.441:31230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341222.623:31231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341224.479:31232): pid=292163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=292177 suid=74 rport=44672 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341224.480:31233): pid=292163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=292177 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341224.481:31234): pid=292163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=292163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341224.481:31235): pid=292163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341226.534:31236): pid=292660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=292660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341226.647:31237): pid=292659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=292660 suid=74 rport=35142 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341226.648:31238): pid=292659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=292660 suid=74 rport=35142 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341227.176:31239): pid=292659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341229.106:31240): pid=292659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=292660 suid=74 rport=35142 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341229.106:31241): pid=292659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=292660 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341229.108:31242): pid=292659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=292659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341229.108:31243): pid=292659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341232.688:31244): pid=293029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=293029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341232.764:31245): pid=293028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=293029 suid=74 rport=54102 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341232.765:31246): pid=293028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=293029 suid=74 rport=54102 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341233.170:31247): pid=293028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pi" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341234.278:31248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341234.404:31249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341234.409:31250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341234.460:31251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341234.614:31252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341234.695:31253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341236.114:31254): pid=293028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=293029 suid=74 rport=54102 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341236.115:31255): pid=293028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=293029 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341236.116:31256): pid=293028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=293028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341236.116:31257): pid=293028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781341238.285:31258): pid=290777 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=USER_END msg=audit(1781341238.286:31259): pid=290777 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin" type=CRYPTO_KEY_USER msg=audit(1781341239.270:31260): pid=293503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=293503 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341239.354:31261): pid=293502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=293503 suid=74 rport=54130 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341239.354:31262): pid=293502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=293503 suid=74 rport=54130 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341239.899:31263): pid=293502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="rancher" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341242.010:31264): pid=293502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=293503 suid=74 rport=54130 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341242.011:31265): pid=293502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=293503 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341242.012:31266): pid=293502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=293502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341242.012:31267): pid=293502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341245.909:31268): pid=294013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=294013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341245.911:31269): pid=293988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=294013 suid=74 rport=57220 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341245.911:31270): pid=293988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=294013 suid=74 rport=57220 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341247.382:31271): pid=293988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.014:31272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.019:31273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.024:31274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.029:31275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.034:31276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.039:31277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.044:31278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.048:31279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.052:31280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.055:31281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.059:31282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.062:31283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341250.068:31284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.293:31285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.372:31286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.486:31287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.521:31288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.536:31289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.568:31290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.600:31291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.645:31292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.689:31293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.776:31294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.799:31295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.880:31296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341250.902:31297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341251.229:31298): pid=293988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=294013 suid=74 rport=57220 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341251.230:31299): pid=293988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=294013 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341251.231:31300): pid=293988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=293988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341251.231:31301): pid=293988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341252.454:31302): pid=294559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=294559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341252.456:31303): pid=294558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=294559 suid=74 rport=57240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341252.456:31304): pid=294558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=294559 suid=74 rport=57240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341252.995:31305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341252.998:31306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341253.000:31307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341253.004:31308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341253.007:31309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341253.448:31310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341253.481:31311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341253.534:31312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341253.787:31313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341253.849:31314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341253.990:31315): pid=294558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="tomcat" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341258.787:31316): pid=294558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=294559 suid=74 rport=57240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341258.788:31317): pid=294558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=294559 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341258.789:31318): pid=294558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=294558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341258.789:31319): pid=294558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341259.887:31320): pid=295181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341259.888:31321): pid=295180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=295181 suid=74 rport=56428 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341259.888:31322): pid=295180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=295181 suid=74 rport=56428 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341261.146:31323): pid=295180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="core" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341264.361:31324): pid=295180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=295181 suid=74 rport=56428 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341264.362:31325): pid=295180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295181 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341264.364:31326): pid=295180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341264.364:31327): pid=295180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341264.991:31328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341264.995:31329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341265.000:31330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341265.244:31331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341265.257:31332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341265.321:31333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341266.295:31334): pid=295696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341266.432:31335): pid=295647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=295696 suid=74 rport=51364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341266.432:31336): pid=295647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=295696 suid=74 rport=51364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341267.501:31337): pid=295647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="devuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341270.984:31338): pid=295647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=295696 suid=74 rport=51364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341270.985:31339): pid=295647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295696 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341270.986:31340): pid=295647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341270.986:31341): pid=295647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341272.711:31342): pid=295986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341273.156:31343): pid=295985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=295986 suid=74 rport=60232 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341273.157:31344): pid=295985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=295986 suid=74 rport=60232 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341273.655:31345): pid=295985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ftpuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341276.070:31346): pid=295985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=295986 suid=74 rport=60232 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341276.071:31347): pid=295985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295986 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341276.072:31348): pid=295985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=295985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341276.072:31349): pid=295985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341280.535:31350): pid=296372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=296372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341280.623:31351): pid=296371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=296372 suid=74 rport=60276 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341280.623:31352): pid=296371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=296372 suid=74 rport=60276 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341280.970:31353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341280.975:31354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341280.978:31355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341280.981:31356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341280.984:31357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341280.988:31358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341280.993:31359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341280.997:31360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341281.001:31361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341281.006:31362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341281.013:31363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341281.018:31364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341281.022:31365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341281.105:31366): pid=296371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="david" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.255:31367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.282:31368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.318:31369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.322:31370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.344:31371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.360:31372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.436:31373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.445:31374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.522:31375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.531:31376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.550:31377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.599:31378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341281.634:31379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341282.949:31380): pid=296371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=296372 suid=74 rport=60276 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341282.949:31381): pid=296371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=296372 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341282.950:31382): pid=296371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=296371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341282.950:31383): pid=296371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341284.007:31384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341284.011:31385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341284.016:31386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341284.020:31387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341284.024:31388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341284.347:31389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341284.430:31390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341284.494:31391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341284.512:31392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341284.536:31393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341287.338:31394): pid=297302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=297302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341287.441:31395): pid=297273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=297302 suid=74 rport=59788 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341287.441:31396): pid=297273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=297302 suid=74 rport=59788 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341287.984:31397): pid=297273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341291.790:31398): pid=297273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297302 suid=74 rport=59788 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341291.790:31399): pid=297273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=297302 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341291.792:31400): pid=297273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=297273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341291.793:31401): pid=297273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341293.901:31402): pid=297645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=297645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341293.981:31403): pid=297644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=297645 suid=74 rport=51548 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341293.981:31404): pid=297644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=297645 suid=74 rport=51548 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341294.652:31405): pid=297644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="osmc" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341295.989:31406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341295.991:31407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341295.994:31408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341296.164:31409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341296.269:31410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341296.283:31411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341297.190:31412): pid=297644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297645 suid=74 rport=51548 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341297.191:31413): pid=297644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=297645 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341297.192:31414): pid=297644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=297644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341297.192:31415): pid=297644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341300.263:31416): pid=298037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341300.265:31417): pid=298028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=298037 suid=74 rport=51582 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341300.265:31418): pid=298028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=298037 suid=74 rport=51582 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341300.411:31419): pid=298056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341300.413:31420): pid=298054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=298056 suid=74 rport=37784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341300.413:31421): pid=298054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=298056 suid=74 rport=37784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341300.501:31422): pid=298054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341300.501:31423): pid=298054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341300.535:31424): pid=298054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341300.535:31425): pid=298054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=298056 suid=74 rport=37784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341300.537:31426): pid=298054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341300.537:31427): pid=298054 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=215 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341300.537:31427): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd7f737c00 a2=1 a3=0 items=0 ppid=39353 pid=298054 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=215 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341300.537:31427): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341300.538:31428): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781341300.581:31429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341300.616:31430): pid=298108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781341300.616:31431): pid=298108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781341300.616:31432): pid=298108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341300.617:31433): pid=298108 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=216 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341300.617:31433): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe96762590 a2=1 a3=0 items=0 ppid=1 pid=298108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=216 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341300.617:31433): proctitle="(systemd)" type=USER_START msg=audit(1781341300.619:31434): pid=298108 uid=0 auid=0 ses=216 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341300.638:31435): prog-id=1473 op=LOAD type=SYSCALL msg=audit(1781341300.638:31435): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff381d10d0 a2=90 a3=0 items=0 ppid=1 pid=298108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=216 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341300.638:31435): proctitle="(systemd)" type=BPF msg=audit(1781341300.639:31436): prog-id=0 op=UNLOAD type=BPF msg=audit(1781341300.639:31437): prog-id=1474 op=LOAD type=SYSCALL msg=audit(1781341300.639:31437): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff381d1170 a2=90 a3=4 items=0 ppid=1 pid=298108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=216 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341300.639:31437): proctitle="(systemd)" type=BPF msg=audit(1781341300.639:31438): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781341300.818:31439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781341300.839:31440): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341300.840:31441): pid=298126 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341300.842:31442): pid=298126 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341300.886:31443): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341300.886:31444): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341300.888:31445): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341300.941:31446): pid=298127 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341300.941:31447): pid=298127 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=707974686F6E33202D6320696D706F727420636F6E6669677061727365723B2063203D20636F6E6669677061727365722E436F6E66696750617273657228293B20632E7265616428272F7661722F6C69622F636F6E6669672D646174612F7075707065742D67656E6572617465642F63696E6465722F6574632F63696E6465722F63696E6465722E636F6E6627293B207072696E7428635B2744454641554C54275D5B2764656661756C745F766F6C756D655F74797065275D29 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341300.942:31448): pid=298127 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341300.945:31449): pid=298127 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341300.989:31450): pid=298127 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341300.989:31451): pid=298127 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341300.991:31452): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341300.991:31453): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341300.991:31454): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=298126 suid=0 rport=37784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341300.992:31455): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341300.995:31456): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341300.995:31457): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341300.996:31458): pid=298054 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781341301.086:31459): pid=298028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="nexus" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341304.812:31460): pid=298028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=298037 suid=74 rport=51582 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341304.813:31461): pid=298028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298037 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341304.814:31462): pid=298028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341304.814:31463): pid=298028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341307.152:31464): pid=298617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341307.259:31465): pid=298616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=298617 suid=74 rport=60180 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341307.259:31466): pid=298616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=298617 suid=74 rport=60180 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341307.608:31467): pid=298616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="frank" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341310.419:31468): pid=298616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=298617 suid=74 rport=60180 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341310.420:31469): pid=298616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298617 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341310.421:31470): pid=298616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=298616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341310.421:31471): pid=298616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781341311.238:31472): pid=298111 uid=0 auid=0 ses=216 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781341311.238:31473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341311.275:31474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.294:31475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.301:31476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.433:31477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.437:31478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.443:31479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.446:31480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.466:31481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.470:31482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341311.494:31483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.558:31484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.561:31485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.566:31486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.623:31487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341311.669:31488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341311.736:31489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341311.753:31490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341311.793:31491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341311.809:31492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341311.832:31493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341312.103:31494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341312.149:31495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341312.180:31496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341312.206:31497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341312.255:31498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341312.272:31499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341312.294:31500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341313.931:31501): pid=299168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=299168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341314.028:31502): pid=299157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=299168 suid=74 rport=53574 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341314.028:31503): pid=299157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=299168 suid=74 rport=53574 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341314.454:31504): pid=299157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341314.990:31505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341314.993:31506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341314.996:31507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341314.998:31508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341315.001:31509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341315.330:31510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341315.341:31511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341315.367:31512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341315.403:31513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341315.660:31514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341318.355:31515): pid=299157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299168 suid=74 rport=53574 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341318.356:31516): pid=299157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=299168 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341318.357:31517): pid=299157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=299157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341318.357:31518): pid=299157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341320.444:31519): pid=299748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=299748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341320.561:31520): pid=299746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=299748 suid=74 rport=53602 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341320.562:31521): pid=299746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=299748 suid=74 rport=53602 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341321.317:31522): pid=299746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341325.170:31523): pid=299746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299748 suid=74 rport=53602 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341325.171:31524): pid=299746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=299748 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341325.172:31525): pid=299746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=299746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341325.172:31526): pid=299746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341326.759:31527): pid=300098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341326.761:31528): pid=300055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=300098 suid=74 rport=42036 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341326.761:31529): pid=300055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=300098 suid=74 rport=42036 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341326.995:31530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341326.999:31531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341327.002:31532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341327.240:31533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341327.299:31534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341327.364:31535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341328.144:31536): pid=300055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="guest" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341330.366:31537): pid=300055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=300098 suid=74 rport=42036 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341330.367:31538): pid=300055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300098 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341330.367:31539): pid=300055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341330.367:31540): pid=300055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341333.517:31541): pid=300537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341333.600:31542): pid=300536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=300537 suid=74 rport=59782 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341333.600:31543): pid=300536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=300537 suid=74 rport=59782 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341333.991:31544): pid=300536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test2" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341338.212:31545): pid=300536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=300537 suid=74 rport=59782 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341338.213:31546): pid=300536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300537 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341338.214:31547): pid=300536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341338.214:31548): pid=300536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341340.083:31549): pid=300833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341340.084:31550): pid=300832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=300833 suid=74 rport=59854 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341340.085:31551): pid=300832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=300833 suid=74 rport=59854 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341341.058:31552): pid=300832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="runner" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.000:31553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.004:31554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.008:31555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.012:31556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.017:31557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.022:31558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.127:31559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.164:31560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.214:31561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.219:31562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.241:31563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.290:31564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.293:31565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341342.326:31566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.373:31567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.385:31568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.548:31569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.562:31570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.579:31571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.592:31572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.601:31573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.623:31574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.677:31575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.734:31576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.763:31577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341342.938:31578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341344.349:31579): pid=300832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=300833 suid=74 rport=59854 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341344.349:31580): pid=300832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300833 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341344.352:31581): pid=300832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=300832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341344.352:31582): pid=300832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341345.998:31583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341346.002:31584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341346.005:31585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341346.010:31586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341346.013:31587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341346.324:31588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341346.395:31589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341346.444:31590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341346.482:31591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341346.723:31592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341347.456:31593): pid=301821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=301821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341347.586:31594): pid=301792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=301821 suid=74 rport=36106 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341347.586:31595): pid=301792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=301821 suid=74 rport=36106 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341348.682:31596): pid=301792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="wso2" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341352.034:31597): pid=301792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=301821 suid=74 rport=36106 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341352.035:31598): pid=301792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=301821 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341352.036:31599): pid=301792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=301792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341352.036:31600): pid=301792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341354.181:31601): pid=302082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=302082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341354.287:31602): pid=302081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=302082 suid=74 rport=42580 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341354.287:31603): pid=302081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=302082 suid=74 rport=42580 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341355.102:31604): pid=302081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="nagios" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341357.991:31605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341357.994:31606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341357.997:31607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341358.124:31608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341358.282:31609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341358.360:31610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341359.670:31611): pid=302081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=302082 suid=74 rport=42580 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341359.671:31612): pid=302081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=302082 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341359.672:31613): pid=302081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=302081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341359.672:31614): pid=302081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341360.724:31615): pid=302588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=302588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341360.726:31616): pid=302578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=302588 suid=74 rport=42636 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341360.726:31617): pid=302578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=302588 suid=74 rport=42636 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341362.088:31618): pid=302578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341365.825:31619): pid=302578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=302588 suid=74 rport=42636 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341365.825:31620): pid=302578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=302588 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341365.826:31621): pid=302578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=302578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341365.827:31622): pid=302578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341367.242:31623): pid=303067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=303067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341367.343:31624): pid=303058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=303067 suid=74 rport=41182 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341367.343:31625): pid=303058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=303067 suid=74 rport=41182 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341368.261:31626): pid=303058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="plex" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341371.990:31627): pid=303058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=303067 suid=74 rport=41182 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341371.990:31628): pid=303058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=303067 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341371.992:31629): pid=303058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=303058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341371.992:31630): pid=303058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341372.996:31631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.000:31632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.003:31633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.006:31634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.010:31635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.013:31636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.016:31637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.023:31638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.029:31639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.035:31640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.041:31641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.046:31642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341373.050:31643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.250:31644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.280:31645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.389:31646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.429:31647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.437:31648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.444:31649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.510:31650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.520:31651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.614:31652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.632:31653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.655:31654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.703:31655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341373.726:31656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341373.906:31657): pid=303583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=303583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341373.919:31658): pid=303574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=303583 suid=74 rport=49784 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341373.919:31659): pid=303574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=303583 suid=74 rport=49784 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341375.709:31660): pid=303574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341376.993:31661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341376.996:31662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341376.999:31663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341377.001:31664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341377.004:31665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341377.273:31666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341377.302:31667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341377.418:31668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341377.508:31669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341377.543:31670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341379.569:31671): pid=303574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=303583 suid=74 rport=49784 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341379.569:31672): pid=303574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=303583 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341379.570:31673): pid=303574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=303574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341379.571:31674): pid=303574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341380.510:31675): pid=304191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341380.512:31676): pid=304182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=304191 suid=74 rport=49824 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341380.512:31677): pid=304182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=304191 suid=74 rport=49824 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341381.681:31678): pid=304182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341385.722:31679): pid=304182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304191 suid=74 rport=49824 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341385.723:31680): pid=304182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304191 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341385.723:31681): pid=304182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341385.723:31682): pid=304182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341387.061:31683): pid=304523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341387.062:31684): pid=304514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=304523 suid=74 rport=50722 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341387.063:31685): pid=304514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=304523 suid=74 rport=50722 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341388.766:31686): pid=304514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341388.997:31687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341389.002:31688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341389.006:31689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341389.227:31690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341389.240:31691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341389.281:31692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341390.752:31693): pid=304514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304523 suid=74 rport=50722 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341390.753:31694): pid=304514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304523 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341390.754:31695): pid=304514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341390.754:31696): pid=304514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341393.602:31697): pid=304976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341393.604:31698): pid=304974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=304976 suid=74 rport=59792 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341393.604:31699): pid=304974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=304976 suid=74 rport=59792 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341394.521:31700): pid=304974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gary" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341396.667:31701): pid=304974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304976 suid=74 rport=59792 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341396.667:31702): pid=304974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304976 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341396.669:31703): pid=304974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=304974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341396.669:31704): pid=304974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341400.203:31705): pid=305284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=305284 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341400.318:31706): pid=305283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=305284 suid=74 rport=59898 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341400.319:31707): pid=305283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=305284 suid=74 rport=59898 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341400.677:31708): pid=305283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="config" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341403.272:31709): pid=305283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=305284 suid=74 rport=59898 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341403.272:31710): pid=305283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=305284 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341403.274:31711): pid=305283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=305283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341403.274:31712): pid=305283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.295:31713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.301:31714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.424:31715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.470:31716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.475:31717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.482:31718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.528:31719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.532:31720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341403.560:31721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341403.586:31722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341403.607:31723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.670:31724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.674:31725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.676:31726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.759:31727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341403.764:31728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341403.785:31729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341403.844:31730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341403.925:31731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341403.975:31732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341404.001:31733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341404.045:31734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341404.101:31735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341404.117:31736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341404.171:31737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341404.218:31738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341406.914:31739): pid=306076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341407.008:31740): pid=306075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=306076 suid=74 rport=40274 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341407.008:31741): pid=306075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=306076 suid=74 rport=40274 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341407.294:31742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341407.393:31743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341407.398:31744): pid=306075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="minecraft" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341407.504:31745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341407.590:31746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341407.594:31747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341407.681:31748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341407.721:31749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341407.803:31750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341407.890:31751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341408.144:31752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341409.424:31753): pid=306075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306076 suid=74 rport=40274 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341409.425:31754): pid=306075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306076 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341409.426:31755): pid=306075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341409.426:31756): pid=306075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341413.472:31757): pid=306459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341413.474:31758): pid=306450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=306459 suid=74 rport=46740 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341413.474:31759): pid=306450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=306459 suid=74 rport=46740 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341414.494:31760): pid=306450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="rocky" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341417.351:31761): pid=306450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306459 suid=74 rport=46740 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341417.352:31762): pid=306450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306459 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341417.353:31763): pid=306450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341417.353:31764): pid=306450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341419.809:31765): pid=26816 uid=0 auid=1002 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26836 suid=1002 rport=46062 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin" type=USER_END msg=audit(1781341419.815:31766): pid=26816 uid=0 auid=1002 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=CRED_DISP msg=audit(1781341419.815:31767): pid=26816 uid=0 auid=1002 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" type=SERVICE_START msg=audit(1781341419.843:31768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341419.847:31769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341419.849:31770): pid=306934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1781341419.851:31771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781341419.851:31772): pid=306906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=306934 suid=74 rport=46830 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341419.851:31773): pid=306906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=306934 suid=74 rport=46830 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781341420.031:31774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341420.093:31775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341420.101:31776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341420.970:31777): pid=306906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="core" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341424.328:31778): pid=306906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306934 suid=74 rport=46830 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341424.328:31779): pid=306906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306934 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341424.329:31780): pid=306906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=306906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341424.329:31781): pid=306906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341425.862:31782): pid=307375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=307375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341426.373:31783): pid=307374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=307375 suid=74 rport=59206 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341426.373:31784): pid=307374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=307375 suid=74 rport=59206 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341427.307:31785): pid=307374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341430.004:31786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341430.047:31787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341431.387:31788): pid=307374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=307375 suid=74 rport=59206 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341431.387:31789): pid=307374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=307375 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341431.388:31790): pid=307374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=307374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341431.388:31791): pid=307374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341433.319:31792): pid=307745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=307745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341433.472:31793): pid=307744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=307745 suid=74 rport=50832 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341433.472:31794): pid=307744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=307745 suid=74 rport=50832 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341433.887:31795): pid=307744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341433.999:31796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.003:31797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.007:31798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.010:31799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.015:31800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.020:31801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.027:31802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.036:31803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.113:31804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.117:31805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.134:31806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.159:31807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.197:31808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341434.240:31809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.278:31810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.362:31811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.401:31812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.446:31813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.470:31814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.494:31815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.517:31816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.542:31817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.591:31818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.687:31819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.718:31820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341434.916:31821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341437.662:31822): pid=307744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=307745 suid=74 rport=50832 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341437.663:31823): pid=307744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=307745 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341437.665:31824): pid=307744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=307744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341437.665:31825): pid=307744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341437.998:31826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341438.003:31827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341438.008:31828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341438.013:31829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341438.222:31830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341438.353:31831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341438.383:31832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341438.468:31833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341438.519:31834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341438.735:31835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341440.639:31836): pid=308619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=308619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341441.800:31837): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=308619 suid=74 rport=50852 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341441.800:31838): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=308619 suid=74 rport=50852 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341442.889:31839): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="newuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341447.019:31840): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=308619 suid=74 rport=50852 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341447.020:31841): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=308619 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341447.021:31842): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=308618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341447.021:31843): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341447.345:31844): pid=308934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=308934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341447.434:31845): pid=308928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=308934 suid=74 rport=36046 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341447.434:31846): pid=308928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=308934 suid=74 rport=36046 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341448.117:31847): pid=308928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341450.178:31848): pid=308928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=308934 suid=74 rport=36046 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341450.178:31849): pid=308928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=308934 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341450.180:31850): pid=308928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=308928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341450.180:31851): pid=308928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341450.201:31852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341450.206:31853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341450.208:31854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341450.410:31855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341450.462:31856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341450.473:31857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341454.835:31858): pid=309435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=309435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341454.837:31859): pid=309424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=309435 suid=74 rport=43696 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341454.837:31860): pid=309424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=309435 suid=74 rport=43696 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341455.557:31861): pid=309424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="oracle" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341457.729:31862): pid=309424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=309435 suid=74 rport=43696 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341457.730:31863): pid=309424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=309435 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341457.731:31864): pid=309424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=309424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341457.731:31865): pid=309424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341461.914:31866): pid=309746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=309746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341461.915:31867): pid=309737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=309746 suid=74 rport=43752 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341461.915:31868): pid=309737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=309746 suid=74 rport=43752 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341463.029:31869): pid=309737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341464.999:31870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.003:31871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.006:31872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.010:31873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.014:31874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.019:31875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.022:31876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.027:31877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.031:31878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.034:31879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.038:31880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.040:31881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341465.043:31882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.367:31883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.380:31884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.387:31885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.445:31886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.471:31887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.493:31888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.521:31889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.561:31890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.569:31891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.594:31892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.607:31893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.699:31894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341465.783:31895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341466.822:31896): pid=309737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=309746 suid=74 rport=43752 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341466.823:31897): pid=309737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=309746 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341466.824:31898): pid=309737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=309737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341466.824:31899): pid=309737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341468.480:31900): pid=310588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=310588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341468.482:31901): pid=310571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=310588 suid=74 rport=45080 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341468.482:31902): pid=310571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=310588 suid=74 rport=45080 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341468.996:31903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341468.998:31904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341469.002:31905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341469.005:31906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341469.007:31907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341469.321:31908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341469.397:31909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341469.451:31910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341469.477:31911): pid=310571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pi" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341469.518:31912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341469.568:31913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341472.768:31914): pid=310571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310588 suid=74 rport=45080 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341472.769:31915): pid=310571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=310588 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341472.770:31916): pid=310571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=310571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341472.770:31917): pid=310571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341475.071:31918): pid=311008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341475.234:31919): pid=311005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=311008 suid=74 rport=51462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341475.234:31920): pid=311005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=311008 suid=74 rport=51462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341476.707:31921): pid=311005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341480.023:31922): pid=311005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311008 suid=74 rport=51462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341480.024:31923): pid=311005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311008 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341480.025:31924): pid=311005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341480.025:31925): pid=311005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341480.997:31926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341481.001:31927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341481.004:31928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341481.202:31929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341481.239:31930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341481.353:31931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341481.852:31932): pid=311581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341481.946:31933): pid=311580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=311581 suid=74 rport=51532 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341481.946:31934): pid=311580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=311581 suid=74 rport=51532 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341482.714:31935): pid=311580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="master" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341487.674:31936): pid=311580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311581 suid=74 rport=51532 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341487.675:31937): pid=311580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311581 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341487.676:31938): pid=311580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341487.676:31939): pid=311580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341488.779:31940): pid=311954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341488.780:31941): pid=311929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=311954 suid=74 rport=48272 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341488.780:31942): pid=311929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=311954 suid=74 rport=48272 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341491.359:31943): pid=311929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="vncuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341495.645:31944): pid=312322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=312322 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341495.646:31945): pid=312321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=312322 suid=74 rport=52142 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341495.646:31946): pid=312321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=312322 suid=74 rport=52142 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341495.704:31947): pid=311929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311954 suid=74 rport=48272 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341495.705:31948): pid=311929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311954 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341495.706:31949): pid=311929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=311929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341495.706:31950): pid=311929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.724:31951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.727:31952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.730:31953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.733:31954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.735:31955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.739:31956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.744:31957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.747:31958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.762:31959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.765:31960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.769:31961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.772:31962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341495.838:31963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341495.983:31964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.098:31965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.119:31966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.159:31967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.201:31968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.232:31969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.261:31970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.293:31971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.368:31972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.391:31973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.399:31974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.445:31975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341496.497:31976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341498.688:31977): pid=312321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341499.996:31978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341500.000:31979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341500.004:31980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341500.009:31981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341500.015:31982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341500.306:31983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341500.420:31984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341500.453:31985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341500.478:31986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341500.611:31987): pid=312321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=312322 suid=74 rport=52142 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341500.613:31988): pid=312321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=312322 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341500.613:31989): pid=312321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=312321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341500.613:31990): pid=312321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341500.637:31991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341502.495:31992): pid=313097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341502.814:31993): pid=313096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=313097 suid=74 rport=52216 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341502.814:31994): pid=313096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=313097 suid=74 rport=52216 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341503.213:31995): pid=313096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="aiuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341506.979:31996): pid=313096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=313097 suid=74 rport=52216 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341506.979:31997): pid=313096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313097 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341506.980:31998): pid=313096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341506.980:31999): pid=313096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341509.489:32000): pid=313582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341509.919:32001): pid=313573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=313582 suid=74 rport=50516 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341509.919:32002): pid=313573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=313582 suid=74 rport=50516 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341510.824:32003): pid=313573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="trader" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341511.988:32004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341511.990:32005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341511.993:32006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341512.123:32007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341512.280:32008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341512.342:32009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341514.344:32010): pid=313573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=313582 suid=74 rport=50516 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341514.344:32011): pid=313573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313582 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341514.345:32012): pid=313573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341514.345:32013): pid=313573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341515.876:32014): pid=313889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341515.877:32015): pid=313880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=313889 suid=74 rport=52340 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341515.878:32016): pid=313880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=313889 suid=74 rport=52340 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341518.087:32017): pid=313880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341521.665:32018): pid=313880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=313889 suid=74 rport=52340 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341521.665:32019): pid=313880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313889 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341521.667:32020): pid=313880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=313880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341521.667:32021): pid=313880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341522.552:32022): pid=314191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=314191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341522.554:32023): pid=314182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=314191 suid=74 rport=52356 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341522.554:32024): pid=314182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=314191 suid=74 rport=52356 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341525.126:32025): pid=314182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.001:32026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.005:32027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.008:32028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.013:32029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.018:32030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.021:32031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.025:32032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.028:32033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.031:32034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.034:32035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.038:32036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.043:32037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341527.048:32038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.302:32039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.326:32040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.348:32041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.401:32042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.497:32043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.517:32044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.539:32045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.583:32046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.641:32047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.656:32048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.683:32049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.705:32050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341527.730:32051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341529.659:32052): pid=314182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=314191 suid=74 rport=52356 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341529.659:32053): pid=314182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=314191 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341529.660:32054): pid=314182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=314182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341529.661:32055): pid=314182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341529.730:32056): pid=315056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=315056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341529.735:32057): pid=315036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=315056 suid=74 rport=46092 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341529.735:32058): pid=315036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=315056 suid=74 rport=46092 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341530.996:32059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341531.000:32060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341531.004:32061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341531.007:32062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341531.011:32063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341531.358:32064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341531.414:32065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341531.448:32066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341531.478:32067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341531.749:32068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341531.787:32069): pid=315036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="vpn" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341534.848:32070): pid=315036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=315056 suid=74 rport=46092 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341534.849:32071): pid=315036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=315056 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341534.850:32072): pid=315036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=315036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341534.850:32073): pid=315036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341536.195:32074): pid=315501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=315501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341536.196:32075): pid=315484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=315501 suid=74 rport=49250 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341536.197:32076): pid=315484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=315501 suid=74 rport=49250 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341537.729:32077): pid=315484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="nginx" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341541.784:32078): pid=315484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=315501 suid=74 rport=49250 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341541.784:32079): pid=315484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=315501 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341541.786:32080): pid=315484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=315484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341541.786:32081): pid=315484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341542.996:32082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341543.001:32083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341543.004:32084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341543.132:32085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341543.309:32086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341543.314:32087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341543.691:32088): pid=316078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341543.693:32089): pid=316076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=316078 suid=74 rport=42556 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341543.693:32090): pid=316076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=316078 suid=74 rport=42556 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341544.615:32091): pid=316076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="appuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341547.701:32092): pid=316076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=316078 suid=74 rport=42556 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341547.702:32093): pid=316076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316078 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341547.703:32094): pid=316076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341547.703:32095): pid=316076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341549.964:32096): pid=316426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341549.966:32097): pid=316425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=316426 suid=74 rport=42594 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341549.966:32098): pid=316425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=316426 suid=74 rport=42594 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341551.192:32099): pid=316425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341555.017:32100): pid=316425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=316426 suid=74 rport=42594 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341555.018:32101): pid=316425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316426 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341555.020:32102): pid=316425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341555.020:32103): pid=316425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341556.216:32104): pid=316786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341556.294:32105): pid=316785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=316786 suid=74 rport=34122 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341556.294:32106): pid=316785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=316786 suid=74 rport=34122 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341557.143:32107): pid=316785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="runner" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.000:32108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.004:32109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.008:32110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.012:32111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.016:32112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.021:32113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.025:32114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.029:32115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.033:32116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.040:32117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.044:32118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.047:32119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341558.053:32120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.337:32121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.354:32122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.439:32123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.460:32124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.466:32125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.530:32126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.558:32127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.566:32128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.603:32129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.617:32130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.668:32131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.692:32132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341558.717:32133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341560.481:32134): pid=316785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=316786 suid=74 rport=34122 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341560.482:32135): pid=316785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316786 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341560.483:32136): pid=316785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=316785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341560.483:32137): pid=316785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341561.989:32138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341561.991:32139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341561.994:32140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341561.996:32141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341561.999:32142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341562.333:32143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341562.388:32144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341562.440:32145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341562.501:32146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341562.632:32147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341563.827:32148): pid=317577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=317577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341563.924:32149): pid=317576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=317577 suid=74 rport=49986 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341563.924:32150): pid=317576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=317577 suid=74 rport=49986 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341564.350:32151): pid=317576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test1" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341567.759:32152): pid=317576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317577 suid=74 rport=49986 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341567.760:32153): pid=317576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=317577 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341567.761:32154): pid=317576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=317576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341567.761:32155): pid=317576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341569.660:32156): pid=318019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341569.751:32157): pid=318018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=318019 suid=74 rport=50030 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341569.751:32158): pid=318018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=318019 suid=74 rport=50030 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341570.573:32159): pid=318018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="tester" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341573.053:32160): pid=318018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318019 suid=74 rport=50030 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341573.055:32161): pid=318018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318019 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341573.056:32162): pid=318018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341573.056:32163): pid=318018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341573.998:32164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341574.005:32165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341574.010:32166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341574.208:32167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341574.232:32168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341574.280:32169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341576.472:32170): pid=318347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341576.593:32171): pid=318346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=318347 suid=74 rport=37240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341576.594:32172): pid=318346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=318347 suid=74 rport=37240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341577.671:32173): pid=318346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="elasticsearch" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341579.587:32174): pid=318346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318347 suid=74 rport=37240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341579.587:32175): pid=318346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318347 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341579.589:32176): pid=318346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341579.589:32177): pid=318346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341582.885:32178): pid=318652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341582.887:32179): pid=318638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=318652 suid=74 rport=35940 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341582.887:32180): pid=318638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=318652 suid=74 rport=35940 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341584.708:32181): pid=318638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sam" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341588.989:32182): pid=318638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318652 suid=74 rport=35940 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341588.989:32183): pid=318638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318652 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341588.991:32184): pid=318638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=318638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341588.991:32185): pid=318638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.004:32186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.010:32187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.014:32188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.019:32189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.026:32190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.030:32191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.036:32192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.041:32193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.047:32194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.050:32195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.054:32196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.058:32197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341589.061:32198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341589.212:32199): pid=319325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=319325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341589.213:32200): pid=319163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=319325 suid=74 rport=35956 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341589.213:32201): pid=319163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=319325 suid=74 rport=35956 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781341589.289:32202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.419:32203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.442:32204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.461:32205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.513:32206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.530:32207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.652:32208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.666:32209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.716:32210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.735:32211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.748:32212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.752:32213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341589.799:32214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341590.907:32215): pid=319163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="crafty" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341593.001:32216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341593.004:32217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341593.007:32218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341593.010:32219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341593.013:32220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341593.315:32221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341593.363:32222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341593.373:32223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341593.421:32224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341593.597:32225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341594.411:32226): pid=319163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319325 suid=74 rport=35956 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341594.412:32227): pid=319163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=319325 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341594.413:32228): pid=319163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=319163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341594.413:32229): pid=319163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341596.170:32230): pid=319923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=319923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341596.172:32231): pid=319922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=319923 suid=74 rport=51892 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341596.172:32232): pid=319922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=319923 suid=74 rport=51892 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341597.009:32233): pid=319922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user1" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341600.150:32234): pid=319922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319923 suid=74 rport=51892 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341600.151:32235): pid=319922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=319923 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341600.152:32236): pid=319922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=319922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341600.152:32237): pid=319922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341603.049:32238): pid=320417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=320417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341603.134:32239): pid=320416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=320417 suid=74 rport=50614 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341603.134:32240): pid=320416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=320417 suid=74 rport=50614 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341603.572:32241): pid=320416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="hadoop" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341604.992:32242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341604.994:32243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341604.997:32244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341605.194:32245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341605.230:32246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341605.267:32247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341606.518:32248): pid=320416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320417 suid=74 rport=50614 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341606.518:32249): pid=320416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=320417 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341606.519:32250): pid=320416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=320416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341606.519:32251): pid=320416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341609.414:32252): pid=320846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=320846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341609.415:32253): pid=320845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=320846 suid=74 rport=50692 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341609.415:32254): pid=320845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=320846 suid=74 rport=50692 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341610.603:32255): pid=320845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jellyfin" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341613.486:32256): pid=320845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320846 suid=74 rport=50692 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341613.487:32257): pid=320845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=320846 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341613.488:32258): pid=320845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=320845 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341613.488:32259): pid=320845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341616.425:32260): pid=321238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=321238 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341616.517:32261): pid=321237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=321238 suid=74 rport=34192 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341616.518:32262): pid=321237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=321238 suid=74 rport=34192 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341616.975:32263): pid=321237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="server" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.007:32264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.012:32265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.016:32266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.020:32267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.024:32268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.028:32269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.037:32270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.043:32271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.048:32272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.053:32273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.063:32274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.070:32275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341620.075:32276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.279:32277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.320:32278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.339:32279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.358:32280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.411:32281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.458:32282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.615:32283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341620.654:32284): pid=321237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321238 suid=74 rport=34192 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341620.655:32285): pid=321237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=321238 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341620.656:32286): pid=321237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=321237 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341620.656:32287): pid=321237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.687:32288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.698:32289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.699:32290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.754:32291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.787:32292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341620.893:32293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341623.459:32294): pid=321866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=321866 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341623.547:32295): pid=321865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=321866 suid=74 rport=43266 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341623.547:32296): pid=321865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=321866 suid=74 rport=43266 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341623.860:32297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341623.864:32298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341623.868:32299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341623.871:32300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341623.874:32301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341623.951:32302): pid=321865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341624.176:32303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341624.220:32304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341624.315:32305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341624.336:32306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341624.463:32307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341625.620:32308): pid=321865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321866 suid=74 rport=43266 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341625.621:32309): pid=321865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=321866 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341625.622:32310): pid=321865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=321865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341625.622:32311): pid=321865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341629.698:32312): pid=322460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=322460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341629.797:32313): pid=322458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=322460 suid=74 rport=43284 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341629.797:32314): pid=322458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=322460 suid=74 rport=43284 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341630.214:32315): pid=322458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="runner" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341633.557:32316): pid=322458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322460 suid=74 rport=43284 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341633.557:32317): pid=322458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=322460 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341633.559:32318): pid=322458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=322458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341633.559:32319): pid=322458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341635.994:32320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341635.999:32321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341636.004:32322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341636.166:32323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341636.303:32324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341636.340:32325): pid=322776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=322776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341636.344:32326): pid=322752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=322776 suid=74 rport=56942 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341636.344:32327): pid=322752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=322776 suid=74 rport=56942 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781341636.344:32328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341637.227:32329): pid=322752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="myuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341639.349:32330): pid=322752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322776 suid=74 rport=56942 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341639.349:32331): pid=322752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=322776 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341639.351:32332): pid=322752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=322752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341639.351:32333): pid=322752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341642.733:32334): pid=323125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=323125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341642.858:32335): pid=323124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=323125 suid=74 rport=60428 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341642.858:32336): pid=323124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=323125 suid=74 rport=60428 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341643.356:32337): pid=323124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ftp" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341646.156:32338): pid=323124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323125 suid=74 rport=60428 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341646.157:32339): pid=323124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=323125 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341646.158:32340): pid=323124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=323124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341646.158:32341): pid=323124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="ftp" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341649.601:32342): pid=323619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=323619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341649.713:32343): pid=323618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=323619 suid=74 rport=60524 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341649.714:32344): pid=323618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=323619 suid=74 rport=60524 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341650.221:32345): pid=323618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.000:32346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.005:32347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.008:32348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.012:32349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.015:32350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.019:32351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.022:32352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.025:32353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.029:32354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.032:32355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.036:32356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.039:32357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341651.042:32358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.216:32359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.313:32360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.332:32361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.367:32362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.464:32363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.479:32364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.491:32365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.507:32366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.542:32367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.557:32368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.591:32369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.643:32370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341651.728:32371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341652.107:32372): pid=323618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323619 suid=74 rport=60524 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341652.108:32373): pid=323618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=323619 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341652.109:32374): pid=323618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=323618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341652.109:32375): pid=323618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341654.678:32376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341654.682:32377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341654.688:32378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341654.694:32379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341654.698:32380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341655.013:32381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341655.103:32382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341655.113:32383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341655.180:32384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341655.278:32385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341656.527:32386): pid=324380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=324380 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341656.628:32387): pid=324379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=324380 suid=74 rport=55708 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341656.628:32388): pid=324379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=324380 suid=74 rport=55708 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341656.995:32389): pid=324379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="adminuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341660.575:32390): pid=324379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324380 suid=74 rport=55708 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341660.575:32391): pid=324379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=324380 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341660.576:32392): pid=324379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=324379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341660.576:32393): pid=324379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341663.746:32394): pid=324875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=324875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341663.747:32395): pid=324865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=324875 suid=74 rport=53680 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341663.747:32396): pid=324865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=324875 suid=74 rport=53680 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341664.817:32397): pid=324865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="claude" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341666.992:32398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341666.995:32399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341666.998:32400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341667.354:32401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341667.420:32402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341667.469:32403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341669.016:32404): pid=324865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324875 suid=74 rport=53680 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341669.017:32405): pid=324865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=324875 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341669.019:32406): pid=324865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=324865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341669.019:32407): pid=324865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341670.144:32408): pid=325304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=325304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341670.145:32409): pid=325303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=325304 suid=74 rport=53776 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341670.145:32410): pid=325303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=325304 suid=74 rport=53776 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341670.855:32411): pid=325303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bitrix" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341675.131:32412): pid=325303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325304 suid=74 rport=53776 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341675.132:32413): pid=325303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=325304 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341675.133:32414): pid=325303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=325303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341675.133:32415): pid=325303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341676.773:32416): pid=325692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=325692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341676.790:32417): pid=325675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=325692 suid=74 rport=38082 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341676.791:32418): pid=325675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=325692 suid=74 rport=38082 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341677.526:32419): pid=325675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pi" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341680.523:32420): pid=325675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325692 suid=74 rport=38082 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341680.523:32421): pid=325675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=325692 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341680.525:32422): pid=325675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=325675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341680.525:32423): pid=325675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.000:32424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.005:32425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.009:32426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.013:32427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.017:32428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.021:32429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.024:32430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.028:32431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.033:32432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.038:32433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.043:32434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.051:32435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341682.055:32436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.344:32437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.374:32438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.498:32439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.506:32440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.524:32441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.630:32442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.655:32443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.682:32444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.706:32445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.736:32446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.771:32447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.815:32448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341682.827:32449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341683.210:32450): pid=326307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=326307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341683.212:32451): pid=326298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=326307 suid=74 rport=36662 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341683.212:32452): pid=326298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=326307 suid=74 rport=36662 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341683.977:32453): pid=326298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341685.858:32454): pid=326298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326307 suid=74 rport=36662 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341685.859:32455): pid=326298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=326307 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341685.860:32456): pid=326298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=326298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341685.860:32457): pid=326298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341685.873:32458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341685.876:32459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341685.879:32460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341685.881:32461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341685.885:32462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341686.207:32463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341686.239:32464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341686.305:32465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341686.422:32466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341686.547:32467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341689.432:32468): pid=326896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=326896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341689.538:32469): pid=326895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=326896 suid=74 rport=36706 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341689.538:32470): pid=326895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=326896 suid=74 rport=36706 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341690.510:32471): pid=326895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="kali" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341692.966:32472): pid=326895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326896 suid=74 rport=36706 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341692.966:32473): pid=326895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=326896 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341692.968:32474): pid=326895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=326895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341692.968:32475): pid=326895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341695.403:32476): pid=327118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341695.404:32477): pid=327116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=327118 suid=74 rport=41220 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341695.404:32478): pid=327116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=327118 suid=74 rport=41220 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341696.841:32479): pid=327116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341697.991:32480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341697.993:32481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341697.996:32482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341698.223:32483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341698.243:32484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341698.328:32485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341700.453:32486): pid=327116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327118 suid=74 rport=41220 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341700.453:32487): pid=327116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327118 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341700.455:32488): pid=327116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341700.455:32489): pid=327116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341702.055:32490): pid=327557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341702.056:32491): pid=327555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=327557 suid=74 rport=41272 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341702.057:32492): pid=327555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=327557 suid=74 rport=41272 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341703.060:32493): pid=327555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341706.469:32494): pid=327555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327557 suid=74 rport=41272 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341706.470:32495): pid=327555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327557 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341706.471:32496): pid=327555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341706.471:32497): pid=327555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341708.346:32498): pid=327833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341708.347:32499): pid=327832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=327833 suid=74 rport=46092 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341708.347:32500): pid=327832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=327833 suid=74 rport=46092 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341709.430:32501): pid=327832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="work" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341712.229:32502): pid=327832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327833 suid=74 rport=46092 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341712.229:32503): pid=327832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327833 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341712.230:32504): pid=327832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=327832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341712.230:32505): pid=327832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341712.990:32506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341712.993:32507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341712.995:32508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341712.997:32509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341712.999:32510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.001:32511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.003:32512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.006:32513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.009:32514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.011:32515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.014:32516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.017:32517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341713.019:32518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.299:32519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.341:32520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.400:32521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.421:32522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.462:32523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.474:32524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.486:32525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.538:32526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.550:32527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.570:32528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.622:32529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.640:32530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341713.748:32531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341714.966:32532): pid=328580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=328580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341715.341:32533): pid=328572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=328580 suid=74 rport=37624 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341715.341:32534): pid=328572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=328580 suid=74 rport=37624 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341715.873:32535): pid=328572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user4" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341716.992:32536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341716.997:32537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341717.003:32538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341717.010:32539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341717.015:32540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341717.405:32541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341717.441:32542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341717.459:32543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341717.614:32544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341717.694:32545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341719.477:32546): pid=328572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=328580 suid=74 rport=37624 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341719.478:32547): pid=328572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=328580 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341719.479:32548): pid=328572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=328572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341719.479:32549): pid=328572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341721.650:32550): pid=329247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=329247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341721.778:32551): pid=329246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=329247 suid=74 rport=37690 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341721.778:32552): pid=329246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=329247 suid=74 rport=37690 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341722.576:32553): pid=329246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="mysql" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341726.058:32554): pid=329246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=329247 suid=74 rport=37690 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341726.059:32555): pid=329246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=329247 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341726.060:32556): pid=329246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=329246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341726.060:32557): pid=329246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341728.082:32558): pid=329420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=329420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341728.171:32559): pid=329418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=329420 suid=74 rport=47062 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341728.172:32560): pid=329418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=329420 suid=74 rport=47062 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341728.992:32561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341728.996:32562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341729.000:32563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341729.130:32564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341729.142:32565): pid=329418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341729.241:32566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341729.292:32567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341732.972:32568): pid=329418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=329420 suid=74 rport=47062 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341732.972:32569): pid=329418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=329420 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341732.974:32570): pid=329418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=329418 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341732.974:32571): pid=329418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341734.821:32572): pid=330065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341734.823:32573): pid=330064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=330065 suid=74 rport=60024 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341734.823:32574): pid=330064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=330065 suid=74 rport=60024 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341735.831:32575): pid=330064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="jellyfin" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341738.778:32576): pid=330064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=330065 suid=74 rport=60024 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341738.778:32577): pid=330064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330065 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341738.780:32578): pid=330064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341738.780:32579): pid=330064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341741.490:32580): pid=330378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341741.491:32581): pid=330376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=330378 suid=74 rport=60086 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341741.492:32582): pid=330376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=330378 suid=74 rport=60086 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341742.156:32583): pid=330376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="zabbix" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.002:32584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.006:32585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.009:32586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.011:32587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.014:32588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.017:32589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.020:32590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.023:32591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.030:32592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.033:32593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.037:32594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.039:32595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341744.042:32596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.256:32597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.380:32598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.405:32599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.450:32600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.482:32601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.501:32602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.551:32603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.560:32604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.572:32605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.615:32606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.640:32607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.660:32608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341744.697:32609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341746.269:32610): pid=330376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=330378 suid=74 rport=60086 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341746.271:32611): pid=330376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330378 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341746.272:32612): pid=330376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341746.272:32613): pid=330376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341747.824:32614): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341747.829:32615): pid=330957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=330961 suid=74 rport=45344 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341747.829:32616): pid=330957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=330961 suid=74 rport=45344 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341747.994:32617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341747.997:32618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341748.000:32619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341748.003:32620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341748.005:32621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341748.285:32622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341748.342:32623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341748.386:32624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341748.456:32625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341748.579:32626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341748.675:32627): pid=330957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="kingbase" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341753.253:32628): pid=330957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=330961 suid=74 rport=45344 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341753.254:32629): pid=330957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330961 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341753.256:32630): pid=330957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=330957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341753.256:32631): pid=330957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341754.212:32632): pid=331515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=331515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341754.214:32633): pid=331505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=331515 suid=74 rport=48952 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341754.214:32634): pid=331505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=331515 suid=74 rport=48952 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341755.292:32635): pid=331505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="cloud" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341759.298:32636): pid=331505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=331515 suid=74 rport=48952 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341759.299:32637): pid=331505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=331515 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341759.300:32638): pid=331505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=331505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341759.300:32639): pid=331505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341759.331:32640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341759.335:32641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341759.339:32642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341759.535:32643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341759.655:32644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341759.707:32645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341760.982:32646): pid=331955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=331955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341760.983:32647): pid=331902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=331955 suid=74 rport=49042 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341760.984:32648): pid=331902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=331955 suid=74 rport=49042 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341762.562:32649): pid=331902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="developer" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341765.537:32650): pid=331902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=331955 suid=74 rport=49042 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341765.538:32651): pid=331902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=331955 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341765.540:32652): pid=331902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=331902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341765.540:32653): pid=331902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341767.791:32654): pid=332243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=332243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341767.901:32655): pid=332242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=332243 suid=74 rport=48290 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341767.901:32656): pid=332242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=332243 suid=74 rport=48290 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341768.299:32657): pid=332242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="claude" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341770.648:32658): pid=332242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=332243 suid=74 rport=48290 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341770.649:32659): pid=332242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=332243 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341770.650:32660): pid=332242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=332242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341770.650:32661): pid=332242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341774.348:32662): pid=332645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=332645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341774.349:32663): pid=332614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=332645 suid=74 rport=50934 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341774.349:32664): pid=332614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=332645 suid=74 rport=50934 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341775.000:32665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.004:32666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.007:32667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.012:32668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.016:32669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.020:32670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.024:32671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.028:32672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.031:32673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.036:32674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.039:32675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.042:32676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341775.047:32677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.311:32678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.372:32679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.424:32680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.456:32681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.493:32682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.582:32683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.610:32684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.628:32685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.681:32686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.696:32687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.733:32688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.751:32689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341775.797:32690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341775.946:32691): pid=332614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="testuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341778.563:32692): pid=332614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=332645 suid=74 rport=50934 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341778.564:32693): pid=332614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=332645 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341778.565:32694): pid=332614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=332614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341778.565:32695): pid=332614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341778.584:32696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341778.587:32697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341778.589:32698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341778.591:32699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341778.595:32700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341778.908:32701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341778.933:32702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341779.017:32703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341779.068:32704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341779.145:32705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341780.756:32706): pid=333655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=333655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341780.757:32707): pid=333646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=333655 suid=74 rport=51008 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341780.757:32708): pid=333646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=333655 suid=74 rport=51008 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341782.287:32709): pid=333646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user2" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341785.884:32710): pid=333646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=333655 suid=74 rport=51008 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341785.885:32711): pid=333646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=333655 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341785.887:32712): pid=333646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=333646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341785.887:32713): pid=333646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341787.217:32714): pid=333810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=333810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341787.218:32715): pid=333809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=333810 suid=74 rport=48566 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341787.218:32716): pid=333809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=333810 suid=74 rport=48566 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341788.751:32717): pid=333809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341789.990:32718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341789.995:32719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341789.998:32720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341790.154:32721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341790.216:32722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341790.262:32723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341792.641:32724): pid=333809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=333810 suid=74 rport=48566 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341792.642:32725): pid=333809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=333810 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341792.643:32726): pid=333809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=333809 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341792.643:32727): pid=333809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341793.691:32728): pid=334450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=334450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341793.692:32729): pid=334447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=334450 suid=74 rport=48694 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341793.692:32730): pid=334447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=334450 suid=74 rport=48694 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341794.680:32731): pid=334447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="nutanix" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341797.534:32732): pid=334447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=334450 suid=74 rport=48694 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341797.534:32733): pid=334447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=334450 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341797.536:32734): pid=334447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=334447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341797.536:32735): pid=334447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341800.580:32736): pid=334770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=334770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341800.581:32737): pid=334767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=334770 suid=74 rport=48778 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341800.582:32738): pid=334767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=334770 suid=74 rport=48778 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341802.087:32739): pid=334767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="guest" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.012:32740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.017:32741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.021:32742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.024:32743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.027:32744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.030:32745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.044:32746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.047:32747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.049:32748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.051:32749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.054:32750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.056:32751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341806.061:32752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.254:32753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.358:32754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.363:32755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.466:32756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.510:32757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.527:32758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.532:32759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.540:32760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.555:32761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.650:32762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.670:32763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341806.678:32764): pid=334767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=334770 suid=74 rport=48778 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341806.679:32765): pid=334767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=334770 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341806.680:32766): pid=334767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=334767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341806.680:32767): pid=334767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.716:32768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341806.764:32769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341806.942:32770): pid=335345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=335345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341806.944:32771): pid=335342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=335345 suid=74 rport=34476 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341806.944:32772): pid=335342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=335345 suid=74 rport=34476 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341808.782:32773): pid=335342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="debian" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341808.987:32774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341808.989:32775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341809.118:32776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341809.122:32777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341809.231:32778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341809.356:32779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341809.416:32780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341809.473:32781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341809.496:32782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341809.772:32783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341811.930:32784): pid=335342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335345 suid=74 rport=34476 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341811.931:32785): pid=335342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=335345 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341811.933:32786): pid=335342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=335342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341811.933:32787): pid=335342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341813.306:32788): pid=335891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=335891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341813.307:32789): pid=335890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=335891 suid=74 rport=36654 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341813.307:32790): pid=335890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=335891 suid=74 rport=36654 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341814.827:32791): pid=335890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="chris" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341819.162:32792): pid=335890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335891 suid=74 rport=36654 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341819.163:32793): pid=335890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=335891 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341819.163:32794): pid=335890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=335890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341819.163:32795): pid=335890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341819.808:32796): pid=336161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341819.809:32797): pid=336045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=336161 suid=74 rport=36730 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341819.809:32798): pid=336045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=336161 suid=74 rport=36730 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341820.991:32799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341820.996:32800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341820.999:32801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341821.004:32802): pid=336045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341821.207:32803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341821.247:32804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341821.291:32805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341824.935:32806): pid=336045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=336161 suid=74 rport=36730 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341824.936:32807): pid=336045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336161 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341824.937:32808): pid=336045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341824.937:32809): pid=336045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341826.883:32810): pid=336637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341826.967:32811): pid=336636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=336637 suid=74 rport=52234 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341826.967:32812): pid=336636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=336637 suid=74 rport=52234 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341827.362:32813): pid=336636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341830.564:32814): pid=336636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=336637 suid=74 rport=52234 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341830.564:32815): pid=336636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336637 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341830.566:32816): pid=336636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341830.566:32817): pid=336636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341833.431:32818): pid=336995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341833.551:32819): pid=336994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=336995 suid=74 rport=33320 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341833.551:32820): pid=336994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=336995 suid=74 rport=33320 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341834.180:32821): pid=336994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="claude" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341836.300:32822): pid=336994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=336995 suid=74 rport=33320 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341836.301:32823): pid=336994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336995 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341836.302:32824): pid=336994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=336994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341836.302:32825): pid=336994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.323:32826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.439:32827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.443:32828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.468:32829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.484:32830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.593:32831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.598:32832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.601:32833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.605:32834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.608:32835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.704:32836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.716:32837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.718:32838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.722:32839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.778:32840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341836.786:32841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.794:32842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.830:32843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.892:32844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.937:32845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.970:32846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341836.991:32847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341837.070:32848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341837.085:32849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341837.255:32850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341837.313:32851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341839.992:32852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341839.995:32853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341839.998:32854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341840.001:32855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341840.004:32856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341840.300:32857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341840.353:32858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341840.372:32859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341840.468:32860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341840.509:32861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341840.524:32862): pid=338064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341840.633:32863): pid=338063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=338064 suid=74 rport=33390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341840.634:32864): pid=338063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=338064 suid=74 rport=33390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341841.073:32865): pid=338063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="www" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341843.644:32866): pid=338063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=338064 suid=74 rport=33390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341843.645:32867): pid=338063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338064 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341843.646:32868): pid=338063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341843.646:32869): pid=338063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341847.357:32870): pid=338225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341847.358:32871): pid=338218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=338225 suid=74 rport=43128 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341847.358:32872): pid=338218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=338225 suid=74 rport=43128 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341848.479:32873): pid=338218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341851.997:32874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341852.003:32875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341852.009:32876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341852.184:32877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341852.270:32878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341852.279:32879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341852.385:32880): pid=338218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=338225 suid=74 rport=43128 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341852.386:32881): pid=338218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338225 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341852.387:32882): pid=338218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341852.387:32883): pid=338218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341855.526:32884): pid=338912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341856.267:32885): pid=338911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=338912 suid=74 rport=60120 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341856.268:32886): pid=338911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=338912 suid=74 rport=60120 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341857.185:32887): pid=338911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test1" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341860.350:32888): pid=338911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=338912 suid=74 rport=60120 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341860.351:32889): pid=338911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338912 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341860.353:32890): pid=338911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=338911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341860.353:32891): pid=338911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341862.783:32892): pid=339240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=339240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341862.848:32893): pid=339232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=339240 suid=74 rport=60140 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341862.848:32894): pid=339232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=339240 suid=74 rport=60140 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341866.992:32895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341866.995:32896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341866.997:32897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341866.999:32898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.000:32899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.003:32900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.005:32901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.007:32902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.017:32903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.112:32904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.115:32905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341867.152:32906): pid=339232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="frappe" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.231:32907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.284:32908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.294:32909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341867.363:32910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.374:32911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.387:32912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.438:32913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.462:32914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.507:32915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.543:32916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.560:32917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.581:32918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.598:32919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.692:32920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341867.788:32921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341868.233:32922): pid=339868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=339868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341868.315:32923): pid=339867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=339868 suid=74 rport=47924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341868.315:32924): pid=339867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=339868 suid=74 rport=47924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341869.412:32925): pid=339867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="master" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341870.546:32926): pid=339232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=339240 suid=74 rport=60140 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341870.546:32927): pid=339232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=339240 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341870.547:32928): pid=339232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=339232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341870.547:32929): pid=339232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341870.563:32930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341870.567:32931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341870.571:32932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341870.574:32933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341870.578:32934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341870.874:32935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341870.938:32936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341870.946:32937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341870.999:32938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341871.236:32939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341871.779:32940): pid=339867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=339868 suid=74 rport=47924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341871.780:32941): pid=339867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=339868 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341871.781:32942): pid=339867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=339867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341871.781:32943): pid=339867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341876.778:32944): pid=340414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=340414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341876.783:32945): pid=340395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=340414 suid=74 rport=35618 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341876.783:32946): pid=340395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=340414 suid=74 rport=35618 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341879.649:32947): pid=340395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341882.893:32948): pid=340879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=340879 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341882.894:32949): pid=340865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=340879 suid=74 rport=35684 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341882.895:32950): pid=340865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=340879 suid=74 rport=35684 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341882.996:32951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341882.999:32952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341883.002:32953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341883.153:32954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341883.193:32955): pid=340395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=340414 suid=74 rport=35618 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341883.194:32956): pid=340395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=340414 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341883.195:32957): pid=340395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=340395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341883.195:32958): pid=340395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341883.245:32959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341883.255:32960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341885.570:32961): pid=340865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="rocky" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341890.227:32962): pid=341146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341890.228:32963): pid=341145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=341146 suid=74 rport=40144 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341890.229:32964): pid=341145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=341146 suid=74 rport=40144 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341890.987:32965): pid=341145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341891.010:32966): pid=340865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=340879 suid=74 rport=35684 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341891.011:32967): pid=340865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=340879 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341891.012:32968): pid=340865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=340865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341891.012:32969): pid=340865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341892.353:32970): pid=341337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341892.431:32971): pid=341336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=341337 suid=74 rport=41732 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.226.197.27 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341892.432:32972): pid=341336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=341337 suid=74 rport=41732 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.226.197.27 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341894.546:32973): pid=341145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=341146 suid=74 rport=40144 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341894.546:32974): pid=341145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341146 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341894.548:32975): pid=341145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341894.548:32976): pid=341145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341896.588:32977): pid=341753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341896.589:32978): pid=341745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=341753 suid=74 rport=51606 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341896.590:32979): pid=341745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=341753 suid=74 rport=51606 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341897.338:32980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.340:32981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.469:32982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.473:32983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.477:32984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.482:32985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.532:32986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.574:32987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.577:32988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341897.580:32989): pid=341745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.613:32990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.617:32991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.675:32992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.707:32993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.743:32994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.754:32995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.767:32996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341897.814:32997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.841:32998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.845:32999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.858:33000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.917:33001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341897.993:33002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341898.016:33003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341898.074:33004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341898.085:33005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341898.140:33006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341900.334:33007): pid=341336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=341337 suid=74 rport=41732 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.226.197.27 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341900.335:33008): pid=341336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341337 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1781341900.336:33009): pid=341336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.226.197.27 addr=185.226.197.27 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341900.337:33010): pid=341336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341900.337:33011): pid=341336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=185.226.197.27 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341900.790:33012): pid=341745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=341753 suid=74 rport=51606 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341900.790:33013): pid=341745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341753 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341900.792:33014): pid=341745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=341745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341900.792:33015): pid=341745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341900.997:33016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341901.001:33017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341901.005:33018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341901.012:33019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341901.332:33020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341901.337:33021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341901.376:33022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341901.390:33023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341901.396:33024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341901.893:33025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341903.114:33026): pid=342563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=342563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341903.115:33027): pid=342546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=342563 suid=74 rport=41240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341903.115:33028): pid=342546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=342563 suid=74 rport=41240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341904.414:33029): pid=342546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bot" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341908.553:33030): pid=342546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=342563 suid=74 rport=41240 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341908.554:33031): pid=342546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=342563 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341908.555:33032): pid=342546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=342546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341908.555:33033): pid=342546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341909.660:33034): pid=342775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=342775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341909.662:33035): pid=342764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=342775 suid=74 rport=41298 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341909.662:33036): pid=342764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=342775 suid=74 rport=41298 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341911.231:33037): pid=342764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341913.524:33038): pid=342764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=342775 suid=74 rport=41298 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341913.524:33039): pid=342764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=342775 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341913.525:33040): pid=342764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=342764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341913.525:33041): pid=342764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341913.545:33042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341913.548:33043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341913.552:33044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341913.778:33045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341913.793:33046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341913.866:33047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341916.212:33048): pid=343370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=343370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341916.301:33049): pid=343369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=343370 suid=74 rport=44550 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341916.302:33050): pid=343369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=343370 suid=74 rport=44550 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341916.789:33051): pid=343369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="private" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341921.245:33052): pid=343369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=343370 suid=74 rport=44550 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341921.245:33053): pid=343369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=343370 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341921.246:33054): pid=343369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=343369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341921.246:33055): pid=343369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341922.905:33056): pid=343688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=343688 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341922.986:33057): pid=343686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=343688 suid=74 rport=42318 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341922.986:33058): pid=343686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=343688 suid=74 rport=42318 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341923.419:33059): pid=343686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gitlab" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341925.465:33060): pid=343686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=343688 suid=74 rport=42318 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341925.465:33061): pid=343686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=343688 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341925.466:33062): pid=343686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=343686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341925.467:33063): pid=343686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341927.994:33064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341927.998:33065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.001:33066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.003:33067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.008:33068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.011:33069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.015:33070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.020:33071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.029:33072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.033:33073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.219:33074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.224:33075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341928.229:33076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.317:33077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.409:33078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.526:33079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.540:33080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.595:33081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.613:33082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.664:33083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.736:33084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.752:33085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.761:33086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.827:33087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.845:33088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341928.876:33089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341929.308:33090): pid=344343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=344343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341929.309:33091): pid=344342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=344343 suid=74 rport=42412 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341929.310:33092): pid=344342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=344343 suid=74 rport=42412 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341930.174:33093): pid=344342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341931.946:33094): pid=344342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=344343 suid=74 rport=42412 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341931.946:33095): pid=344342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=344343 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341931.948:33096): pid=344342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=344342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341931.948:33097): pid=344342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341931.980:33098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341931.984:33099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341931.988:33100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341931.992:33101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341931.996:33102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341932.374:33103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341932.385:33104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341932.415:33105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341932.453:33106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341932.501:33107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341936.361:33108): pid=344849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=344849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341936.363:33109): pid=344840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=344849 suid=74 rport=48096 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341936.363:33110): pid=344840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=344849 suid=74 rport=48096 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341937.120:33111): pid=344840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ftpuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341939.567:33112): pid=344840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=344849 suid=74 rport=48096 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341939.567:33113): pid=344840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=344849 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341939.567:33114): pid=344840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=344840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341939.567:33115): pid=344840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341942.510:33116): pid=345315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341942.512:33117): pid=345305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=345315 suid=74 rport=48164 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341942.512:33118): pid=345305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=345315 suid=74 rport=48164 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341942.901:33119): pid=345321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341942.903:33120): pid=345320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345321 suid=74 rport=56812 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341942.903:33121): pid=345320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345321 suid=74 rport=56812 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341943.048:33122): pid=345320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341943.048:33123): pid=345320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341943.070:33124): pid=345320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341943.070:33125): pid=345320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345321 suid=74 rport=56812 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341943.073:33126): pid=345320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341943.073:33127): pid=345320 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=217 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341943.073:33127): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc0c192e90 a2=1 a3=0 items=0 ppid=39353 pid=345320 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=217 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341943.073:33127): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341943.074:33128): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781341943.138:33129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341943.187:33130): pid=345333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781341943.188:33131): pid=345333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781341943.188:33132): pid=345333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341943.189:33133): pid=345333 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=218 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341943.189:33133): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe96762590 a2=1 a3=0 items=0 ppid=1 pid=345333 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=218 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341943.189:33133): proctitle="(systemd)" type=USER_START msg=audit(1781341943.191:33134): pid=345333 uid=0 auid=0 ses=218 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341943.206:33135): prog-id=1475 op=LOAD type=SYSCALL msg=audit(1781341943.206:33135): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff3780e440 a2=90 a3=0 items=0 ppid=1 pid=345333 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=218 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341943.206:33135): proctitle="(systemd)" type=BPF msg=audit(1781341943.207:33136): prog-id=0 op=UNLOAD type=BPF msg=audit(1781341943.207:33137): prog-id=1476 op=LOAD type=SYSCALL msg=audit(1781341943.207:33137): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff3780e4e0 a2=90 a3=4 items=0 ppid=1 pid=345333 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=218 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341943.207:33137): proctitle="(systemd)" type=BPF msg=audit(1781341943.208:33138): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781341943.364:33139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781341943.433:33140): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341943.434:33141): pid=345357 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341943.435:33142): pid=345357 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_AUTH msg=audit(1781341943.440:33143): pid=345305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781341943.479:33144): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341943.479:33145): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341943.483:33146): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341943.555:33147): pid=345362 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341943.555:33148): pid=345362 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E6669672067616C6572612D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341943.557:33149): pid=345362 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341943.561:33150): pid=345362 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781341943.993:33151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341943.996:33152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341943.999:33153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341944.132:33154): pid=345362 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341944.132:33155): pid=345362 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341944.134:33156): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341944.134:33157): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341944.135:33158): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345357 suid=0 rport=56812 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341944.135:33159): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341944.138:33160): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341944.138:33161): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341944.139:33162): pid=345320 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341944.157:33163): pid=345429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341944.158:33164): pid=345428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345429 suid=74 rport=38206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341944.159:33165): pid=345428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345429 suid=74 rport=38206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341944.235:33166): pid=345428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341944.235:33167): pid=345428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341944.267:33168): pid=345428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341944.270:33169): pid=345428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345429 suid=74 rport=38206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341944.274:33170): pid=345428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341944.274:33171): pid=345428 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=219 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341944.274:33171): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcdee23cb0 a2=1 a3=0 items=0 ppid=39353 pid=345428 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=219 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341944.274:33171): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341944.276:33172): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341944.311:33173): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341944.312:33174): pid=345467 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341944.313:33175): pid=345467 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781341944.324:33176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341944.353:33177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781341944.356:33178): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341944.356:33179): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341944.359:33180): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341944.401:33181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341944.414:33182): pid=345482 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341944.414:33183): pid=345482 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F757263652064697361626C652067616C6572612D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341944.414:33184): pid=345482 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341944.417:33185): pid=345482 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341945.214:33186): pid=345482 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341945.214:33187): pid=345482 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341945.218:33188): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345467 suid=0 rport=38206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341945.218:33189): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341945.221:33190): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341945.221:33191): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341945.222:33192): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341945.222:33193): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341945.222:33194): pid=345428 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341945.236:33195): pid=345525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341945.238:33196): pid=345521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345525 suid=74 rport=38208 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341945.238:33197): pid=345521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345525 suid=74 rport=38208 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341945.317:33198): pid=345521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341945.317:33199): pid=345521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341945.349:33200): pid=345521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341945.350:33201): pid=345521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345525 suid=74 rport=38208 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341945.352:33202): pid=345521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341945.353:33203): pid=345521 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=220 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341945.353:33203): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc32408a0 a2=1 a3=0 items=0 ppid=39353 pid=345521 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=220 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341945.353:33203): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341945.354:33204): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341945.395:33205): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341945.397:33206): pid=345532 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341945.399:33207): pid=345532 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341945.442:33208): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341945.442:33209): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341945.444:33210): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341945.513:33211): pid=345533 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341945.514:33212): pid=345533 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E66696720686170726F78792D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341945.515:33213): pid=345533 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341945.519:33214): pid=345533 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341946.110:33215): pid=345533 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341946.110:33216): pid=345533 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341946.113:33217): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345532 suid=0 rport=38208 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341946.113:33218): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341946.116:33219): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341946.116:33220): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341946.116:33221): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341946.116:33222): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341946.117:33223): pid=345521 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341946.143:33224): pid=345560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341946.144:33225): pid=345559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345560 suid=74 rport=38222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341946.145:33226): pid=345559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345560 suid=74 rport=38222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341946.225:33227): pid=345559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341946.225:33228): pid=345559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341946.256:33229): pid=345559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341946.257:33230): pid=345559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345560 suid=74 rport=38222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341946.259:33231): pid=345559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341946.260:33232): pid=345559 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=221 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341946.260:33232): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc68446de0 a2=1 a3=0 items=0 ppid=39353 pid=345559 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=221 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341946.260:33232): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341946.261:33233): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341946.289:33234): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341946.290:33235): pid=345578 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341946.292:33236): pid=345578 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341946.335:33237): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341946.335:33238): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341946.337:33239): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341946.393:33240): pid=345579 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341946.393:33241): pid=345579 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F757263652064697361626C6520686170726F78792D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341946.394:33242): pid=345579 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341946.397:33243): pid=345579 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341947.139:33244): pid=345305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345315 suid=74 rport=48164 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341947.139:33245): pid=345305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345315 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341947.141:33246): pid=345305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341947.141:33247): pid=345305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781341947.187:33248): pid=345579 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341947.187:33249): pid=345579 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341947.191:33250): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345578 suid=0 rport=38222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341947.192:33251): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341947.194:33252): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341947.195:33253): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341947.196:33254): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341947.196:33255): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341947.196:33256): pid=345559 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341947.220:33257): pid=345611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345611 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341947.221:33258): pid=345610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345611 suid=74 rport=38228 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341947.221:33259): pid=345610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345611 suid=74 rport=38228 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341947.313:33260): pid=345610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341947.313:33261): pid=345610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341947.344:33262): pid=345610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341947.345:33263): pid=345610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345611 suid=74 rport=38228 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341947.347:33264): pid=345610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341947.347:33265): pid=345610 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=222 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341947.347:33265): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd08533f90 a2=1 a3=0 items=0 ppid=39353 pid=345610 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=222 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341947.347:33265): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341947.349:33266): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341947.384:33267): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341947.386:33268): pid=345629 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341947.387:33269): pid=345629 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341947.430:33270): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341947.430:33271): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341947.432:33272): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341947.504:33273): pid=345630 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341947.505:33274): pid=345630 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967207261626269746D712D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341947.506:33275): pid=345630 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341947.511:33276): pid=345630 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341948.102:33277): pid=345630 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341948.103:33278): pid=345630 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341948.105:33279): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345629 suid=0 rport=38228 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341948.106:33280): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341948.109:33281): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341948.109:33282): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341948.110:33283): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341948.110:33284): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341948.110:33285): pid=345610 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341948.130:33286): pid=345656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341948.131:33287): pid=345655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345656 suid=74 rport=38244 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341948.131:33288): pid=345655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=345656 suid=74 rport=38244 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341948.220:33289): pid=345655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341948.220:33290): pid=345655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341948.249:33291): pid=345655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341948.249:33292): pid=345655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345656 suid=74 rport=38244 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341948.251:33293): pid=345655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341948.251:33294): pid=345655 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=223 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341948.251:33294): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd01ed8550 a2=1 a3=0 items=0 ppid=39353 pid=345655 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=223 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341948.251:33294): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341948.252:33295): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341948.290:33296): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341948.291:33297): pid=345658 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341948.292:33298): pid=345658 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341948.334:33299): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341948.334:33300): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341948.336:33301): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341948.388:33302): pid=345674 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341948.388:33303): pid=345674 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F757263652064697361626C65207261626269746D712D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341948.389:33304): pid=345674 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341948.392:33305): pid=345674 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341948.974:33306): pid=345704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341948.980:33307): pid=345700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=345704 suid=74 rport=48432 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341948.980:33308): pid=345700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=345704 suid=74 rport=48432 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1781341949.184:33309): pid=345674 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341949.185:33310): pid=345674 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341949.188:33311): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345658 suid=0 rport=38244 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341949.188:33312): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341949.190:33313): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341949.191:33314): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341949.191:33315): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341949.191:33316): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341949.191:33317): pid=345655 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781341949.943:33318): pid=345700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="odoo17" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781341950.751:33319): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1781341951.954:33320): pid=345700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=345704 suid=74 rport=48432 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341951.955:33321): pid=345700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345704 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341951.956:33322): pid=345700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=345700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341951.956:33323): pid=345700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341957.473:33324): pid=346493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=346493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1781341959.000:33325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.003:33326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.006:33327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.011:33328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.017:33329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.022:33330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.029:33331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.034:33332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.039:33333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.042:33334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.047:33335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.051:33336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341959.056:33337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781341959.238:33338): pid=345342 uid=0 auid=0 ses=218 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781341959.238:33339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.268:33340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.429:33341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.471:33342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.497:33343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.523:33344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.535:33345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.587:33346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.607:33347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.620:33348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.677:33349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.688:33350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.715:33351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.724:33352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341959.741:33353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341960.167:33354): pid=346849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=346849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341960.256:33355): pid=346848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=346849 suid=74 rport=36938 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341960.256:33356): pid=346848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=346849 suid=74 rport=36938 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341962.549:33357): pid=346492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=346493 suid=74 rport=36914 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341962.549:33358): pid=346492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=346493 suid=74 rport=36914 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341962.998:33359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341963.002:33360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341963.005:33361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341963.008:33362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341963.012:33363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341963.618:33364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341963.631:33365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341963.667:33366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341963.694:33367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341963.719:33368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341966.429:33369): pid=347093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=BPF msg=audit(1781341970.435:33370): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1781341972.321:33371): pid=347369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341972.322:33372): pid=347368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347369 suid=74 rport=59750 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341972.322:33373): pid=347368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347369 suid=74 rport=59750 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341972.398:33374): pid=347368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341972.398:33375): pid=347368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341972.427:33376): pid=347368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341972.428:33377): pid=347368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347369 suid=74 rport=59750 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341972.430:33378): pid=347368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341972.430:33379): pid=347368 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=224 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341972.430:33379): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3bc94e10 a2=1 a3=0 items=0 ppid=39353 pid=347368 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=224 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341972.430:33379): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341972.431:33380): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781341972.486:33381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341972.511:33382): pid=347374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781341972.511:33383): pid=347374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781341972.512:33384): pid=347374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341972.512:33385): pid=347374 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=225 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341972.512:33385): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffe96762590 a2=1 a3=0 items=0 ppid=1 pid=347374 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341972.512:33385): proctitle="(systemd)" type=USER_START msg=audit(1781341972.516:33386): pid=347374 uid=0 auid=0 ses=225 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341972.542:33387): prog-id=1477 op=LOAD type=SYSCALL msg=audit(1781341972.542:33387): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda81670d0 a2=90 a3=0 items=0 ppid=1 pid=347374 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341972.542:33387): proctitle="(systemd)" type=BPF msg=audit(1781341972.543:33388): prog-id=0 op=UNLOAD type=BPF msg=audit(1781341972.543:33389): prog-id=1478 op=LOAD type=SYSCALL msg=audit(1781341972.543:33389): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda8167170 a2=90 a3=4 items=0 ppid=1 pid=347374 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341972.543:33389): proctitle="(systemd)" type=BPF msg=audit(1781341972.543:33390): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781341972.715:33391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781341972.745:33392): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341972.746:33393): pid=347391 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341972.748:33394): pid=347391 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341972.792:33395): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341972.792:33396): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341972.796:33397): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341972.861:33398): pid=347392 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341972.861:33399): pid=347392 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341972.862:33400): pid=347392 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341972.866:33401): pid=347392 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341972.881:33402): pid=347392 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341972.883:33403): pid=347392 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341972.885:33404): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341972.885:33405): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341972.885:33406): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347391 suid=0 rport=59750 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341972.886:33407): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341972.889:33408): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341972.889:33409): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341972.891:33410): pid=347368 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341972.914:33411): pid=347408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341972.917:33412): pid=347407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347408 suid=74 rport=59764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341972.917:33413): pid=347407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347408 suid=74 rport=59764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341972.998:33414): pid=347407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341972.998:33415): pid=347407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341973.019:33416): pid=347407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341973.019:33417): pid=347407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347408 suid=74 rport=59764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341973.022:33418): pid=347407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341973.022:33419): pid=347407 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=226 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341973.022:33419): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcdc8b37a0 a2=1 a3=0 items=0 ppid=39353 pid=347407 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=226 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341973.022:33419): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341973.024:33420): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341973.058:33421): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341973.059:33422): pid=347410 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341973.061:33423): pid=347410 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341973.104:33424): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341973.104:33425): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341973.106:33426): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341973.179:33427): pid=347411 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341973.179:33428): pid=347411 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341973.181:33429): pid=347411 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341973.187:33430): pid=347411 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_SESSION msg=audit(1781341973.229:33431): pid=347090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=347093 suid=74 rport=37780 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341973.229:33432): pid=347090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=347093 suid=74 rport=37780 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781341973.397:33433): prog-id=1479 op=LOAD type=SYSCALL msg=audit(1781341973.397:33433): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda74a7f50 a2=90 a3=9500000000 items=0 ppid=347483 pid=347484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341973.397:33433): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343333626532393666363530653962613131393062366437393064316561 type=BPF msg=audit(1781341973.415:33434): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781341973.444:33435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341973.459:33436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_horizon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341973.462:33437): pid=347411 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341973.463:33438): pid=347411 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341973.468:33439): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347410 suid=0 rport=59764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341973.468:33440): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341973.471:33441): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341973.472:33442): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341973.472:33443): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341973.473:33444): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341973.473:33445): pid=347407 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341973.596:33446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341974.906:33447): pid=347645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341974.908:33448): pid=347372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=347645 suid=74 rport=37830 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341974.908:33449): pid=347372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=347645 suid=74 rport=37830 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341974.995:33450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341974.999:33451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341975.002:33452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341975.186:33453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341975.193:33454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341975.249:33455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341975.701:33456): pid=347778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341975.703:33457): pid=347777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347778 suid=74 rport=59324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341975.703:33458): pid=347777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347778 suid=74 rport=59324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341975.778:33459): pid=347777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341975.778:33460): pid=347777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341975.810:33461): pid=347777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341975.810:33462): pid=347777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347778 suid=74 rport=59324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341975.813:33463): pid=347777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341975.813:33464): pid=347777 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=227 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341975.813:33464): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffedd98c040 a2=1 a3=0 items=0 ppid=39353 pid=347777 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341975.813:33464): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341975.814:33465): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341975.859:33466): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341975.861:33467): pid=347780 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341975.862:33468): pid=347780 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341975.906:33469): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341975.906:33470): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341975.909:33471): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341975.975:33472): pid=347781 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341975.975:33473): pid=347781 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341975.978:33474): pid=347781 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341975.983:33475): pid=347781 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341976.000:33476): pid=347781 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341976.000:33477): pid=347781 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.004:33478): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347780 suid=0 rport=59324 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.004:33479): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341976.007:33480): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341976.007:33481): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341976.008:33482): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341976.008:33483): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.008:33484): pid=347777 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.029:33485): pid=347797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341976.030:33486): pid=347796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347797 suid=74 rport=59326 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341976.030:33487): pid=347796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347797 suid=74 rport=59326 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341976.106:33488): pid=347796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341976.106:33489): pid=347796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341976.137:33490): pid=347796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341976.137:33491): pid=347796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347797 suid=74 rport=59326 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341976.139:33492): pid=347796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341976.140:33493): pid=347796 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=228 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341976.140:33493): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf9142dc0 a2=1 a3=0 items=0 ppid=39353 pid=347796 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=228 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341976.140:33493): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341976.141:33494): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341976.170:33495): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.171:33496): pid=347799 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341976.173:33497): pid=347799 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341976.216:33498): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341976.216:33499): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.220:33500): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341976.291:33501): pid=347800 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341976.291:33502): pid=347800 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341976.292:33503): pid=347800 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341976.295:33504): pid=347800 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341976.453:33505): prog-id=1480 op=LOAD type=SYSCALL msg=audit(1781341976.453:33505): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd663fd690 a2=90 a3=9500000000 items=0 ppid=347829 pid=347830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341976.453:33505): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653064373734306363653764336636643534393236383633623966636464 type=SERVICE_START msg=audit(1781341976.511:33506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341976.525:33507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_keystone comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341976.527:33508): pid=347800 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341976.527:33509): pid=347800 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.531:33510): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347799 suid=0 rport=59326 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.531:33511): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341976.534:33512): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341976.534:33513): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341976.535:33514): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341976.535:33515): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341976.535:33516): pid=347796 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341976.648:33517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341978.300:33518): pid=347885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341978.301:33519): pid=347884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347885 suid=74 rport=59332 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341978.301:33520): pid=347884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347885 suid=74 rport=59332 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341978.393:33521): pid=347884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341978.393:33522): pid=347884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341978.422:33523): pid=347884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341978.423:33524): pid=347884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347885 suid=74 rport=59332 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341978.426:33525): pid=347884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341978.426:33526): pid=347884 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=229 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341978.426:33526): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe51778a00 a2=1 a3=0 items=0 ppid=39353 pid=347884 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=229 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341978.426:33526): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341978.428:33527): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341978.472:33528): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341978.473:33529): pid=347887 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341978.474:33530): pid=347887 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341978.516:33531): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341978.516:33532): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341978.518:33533): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341978.594:33534): pid=347888 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341978.594:33535): pid=347888 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341978.595:33536): pid=347888 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341978.601:33537): pid=347888 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341978.613:33538): pid=347888 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341978.614:33539): pid=347888 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341978.616:33540): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347887 suid=0 rport=59332 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341978.617:33541): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341978.619:33542): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341978.619:33543): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341978.620:33544): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341978.620:33545): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341978.620:33546): pid=347884 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781341979.069:33547): pid=346492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bob" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341979.244:33548): pid=347904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341979.246:33549): pid=347903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347904 suid=74 rport=59342 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341979.246:33550): pid=347903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347904 suid=74 rport=59342 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341979.332:33551): pid=347903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341979.332:33552): pid=347903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341979.360:33553): pid=347903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341979.361:33554): pid=347903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347904 suid=74 rport=59342 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341979.363:33555): pid=347903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341979.363:33556): pid=347903 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=230 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341979.363:33556): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd11e5d790 a2=1 a3=0 items=0 ppid=39353 pid=347903 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=230 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341979.363:33556): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341979.365:33557): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341979.391:33558): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341979.392:33559): pid=347906 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341979.394:33560): pid=347906 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341979.437:33561): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341979.437:33562): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341979.439:33563): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341979.500:33564): pid=347907 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341979.500:33565): pid=347907 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341979.500:33566): pid=347907 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341979.503:33567): pid=347907 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341979.516:33568): pid=347907 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341979.517:33569): pid=347907 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341979.519:33570): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347906 suid=0 rport=59342 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341979.520:33571): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341979.523:33572): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341979.523:33573): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341979.524:33574): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341979.524:33575): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341979.524:33576): pid=347903 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341980.163:33577): pid=347923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341980.164:33578): pid=347922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347923 suid=74 rport=59344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341980.165:33579): pid=347922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347923 suid=74 rport=59344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341980.255:33580): pid=347922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341980.255:33581): pid=347922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341980.284:33582): pid=347922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341980.284:33583): pid=347922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347923 suid=74 rport=59344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341980.287:33584): pid=347922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341980.287:33585): pid=347922 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=231 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341980.287:33585): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff54961bb0 a2=1 a3=0 items=0 ppid=39353 pid=347922 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=231 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341980.287:33585): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341980.288:33586): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341980.320:33587): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341980.322:33588): pid=347925 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341980.323:33589): pid=347925 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341980.366:33590): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341980.366:33591): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341980.369:33592): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341980.437:33593): pid=347926 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341980.438:33594): pid=347926 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6B657973746F6E655F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341980.439:33595): pid=347926 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341980.442:33596): pid=347926 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341980.455:33597): pid=347926 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341980.455:33598): pid=347926 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341980.458:33599): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347925 suid=0 rport=59344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341980.458:33600): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341980.461:33601): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341980.461:33602): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341980.462:33603): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341980.462:33604): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341980.462:33605): pid=347922 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.073:33606): pid=347942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341981.074:33607): pid=347941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347942 suid=74 rport=59350 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341981.075:33608): pid=347941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347942 suid=74 rport=59350 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341981.158:33609): pid=347941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341981.158:33610): pid=347941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341981.186:33611): pid=347941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341981.186:33612): pid=347941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347942 suid=74 rport=59350 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341981.188:33613): pid=347941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341981.189:33614): pid=347941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=232 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341981.189:33614): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc7f546060 a2=1 a3=0 items=0 ppid=39353 pid=347941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=232 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341981.189:33614): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341981.190:33615): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341981.223:33616): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.224:33617): pid=347944 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341981.226:33618): pid=347944 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341981.269:33619): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341981.269:33620): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.271:33621): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341981.325:33622): pid=347945 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341981.325:33623): pid=347945 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341981.326:33624): pid=347945 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341981.329:33625): pid=347945 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341981.341:33626): pid=347945 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341981.341:33627): pid=347945 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.344:33628): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347944 suid=0 rport=59350 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.345:33629): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341981.348:33630): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341981.348:33631): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341981.349:33632): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341981.349:33633): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.350:33634): pid=347941 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.372:33635): pid=347961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341981.373:33636): pid=347960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347961 suid=74 rport=59362 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341981.373:33637): pid=347960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=347961 suid=74 rport=59362 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341981.451:33638): pid=347960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341981.451:33639): pid=347960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341981.485:33640): pid=347960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341981.485:33641): pid=347960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347961 suid=74 rport=59362 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341981.487:33642): pid=347960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341981.488:33643): pid=347960 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=233 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341981.488:33643): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd9be683a0 a2=1 a3=0 items=0 ppid=39353 pid=347960 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=233 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341981.488:33643): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341981.489:33644): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341981.527:33645): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.528:33646): pid=347963 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341981.530:33647): pid=347963 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341981.573:33648): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341981.573:33649): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.575:33650): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341981.635:33651): pid=347964 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341981.635:33652): pid=347964 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341981.636:33653): pid=347964 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341981.639:33654): pid=347964 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341981.800:33655): prog-id=1481 op=LOAD type=SYSCALL msg=audit(1781341981.800:33655): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffca9304d0 a2=90 a3=9500000000 items=0 ppid=347994 pid=347995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341981.800:33655): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393230656361373530656464376535396464356535643532343532383364 type=SERVICE_START msg=audit(1781341981.863:33656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341981.884:33657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341981.886:33658): pid=347964 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341981.886:33659): pid=347964 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.889:33660): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347963 suid=0 rport=59362 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.890:33661): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341981.893:33662): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341981.893:33663): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341981.894:33664): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341981.894:33665): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341981.894:33666): pid=347960 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341982.026:33667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341982.651:33668): pid=347090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="playground" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341983.581:33669): pid=348045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341983.583:33670): pid=348044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348045 suid=74 rport=37338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341983.583:33671): pid=348044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348045 suid=74 rport=37338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341983.670:33672): pid=348044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341983.670:33673): pid=348044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341983.708:33674): pid=348044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341983.708:33675): pid=348044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348045 suid=74 rport=37338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341983.711:33676): pid=348044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341983.711:33677): pid=348044 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=234 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341983.711:33677): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5ccb7310 a2=1 a3=0 items=0 ppid=39353 pid=348044 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=234 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341983.711:33677): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341983.713:33678): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341983.744:33679): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341983.746:33680): pid=348047 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341983.747:33681): pid=348047 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341983.791:33682): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341983.791:33683): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341983.793:33684): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341983.859:33685): pid=348048 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341983.859:33686): pid=348048 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341983.860:33687): pid=348048 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341983.865:33688): pid=348048 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341983.881:33689): pid=348048 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341983.882:33690): pid=348048 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341983.884:33691): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348047 suid=0 rport=37338 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341983.885:33692): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341983.887:33693): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341983.888:33694): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341983.889:33695): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341983.889:33696): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341983.889:33697): pid=348044 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341983.915:33698): pid=348064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341983.916:33699): pid=348063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348064 suid=74 rport=37344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341983.917:33700): pid=348063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348064 suid=74 rport=37344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341984.009:33701): pid=348063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341984.009:33702): pid=348063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341984.039:33703): pid=348063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341984.039:33704): pid=348063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348064 suid=74 rport=37344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341984.042:33705): pid=348063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341984.043:33706): pid=348063 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=235 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341984.043:33706): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc0dba6e90 a2=1 a3=0 items=0 ppid=39353 pid=348063 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=235 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341984.043:33706): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341984.044:33707): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341984.077:33708): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341984.079:33709): pid=348066 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341984.080:33710): pid=348066 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341984.124:33711): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341984.124:33712): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341984.125:33713): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341984.196:33714): pid=348067 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341984.196:33715): pid=348067 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341984.197:33716): pid=348067 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341984.201:33717): pid=348067 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341984.356:33718): prog-id=1482 op=LOAD type=SYSCALL msg=audit(1781341984.356:33718): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc88da5180 a2=90 a3=9500000000 items=0 ppid=348096 pid=348097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341984.356:33718): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663133333939303163663331316332616631636232353762643935333763 type=SERVICE_START msg=audit(1781341984.423:33719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341984.436:33720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341984.437:33721): pid=348067 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341984.438:33722): pid=348067 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341984.441:33723): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348066 suid=0 rport=37344 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341984.441:33724): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341984.444:33725): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341984.444:33726): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341984.445:33727): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341984.445:33728): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341984.445:33729): pid=348063 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341984.501:33730): pid=348117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341984.503:33731): pid=348043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=348117 suid=74 rport=39852 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341984.503:33732): pid=348043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=348117 suid=74 rport=39852 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781341984.566:33733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341984.682:33734): pid=346492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=346493 suid=74 rport=36914 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341984.684:33735): pid=346492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=346493 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341984.685:33736): pid=346492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=346492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341984.685:33737): pid=346492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341986.191:33738): pid=348127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341986.192:33739): pid=348126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348127 suid=74 rport=37356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341986.192:33740): pid=348126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348127 suid=74 rport=37356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341986.273:33741): pid=348126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341986.273:33742): pid=348126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341986.302:33743): pid=348126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341986.303:33744): pid=348126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348127 suid=74 rport=37356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341986.305:33745): pid=348126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341986.305:33746): pid=348126 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=236 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341986.305:33746): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd5841230 a2=1 a3=0 items=0 ppid=39353 pid=348126 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=236 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341986.305:33746): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341986.306:33747): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341986.339:33748): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.340:33749): pid=348129 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341986.342:33750): pid=348129 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341986.384:33751): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341986.385:33752): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.387:33753): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348130 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781341986.421:33754): pid=347372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="appuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341986.449:33755): pid=348130 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341986.450:33756): pid=348130 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341986.452:33757): pid=348130 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341986.457:33758): pid=348130 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341986.476:33759): pid=348130 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341986.476:33760): pid=348130 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.479:33761): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348129 suid=0 rport=37356 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.480:33762): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341986.483:33763): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341986.483:33764): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341986.484:33765): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341986.484:33766): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.484:33767): pid=348126 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.508:33768): pid=348146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348146 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341986.509:33769): pid=348145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348146 suid=74 rport=37360 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341986.509:33770): pid=348145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348146 suid=74 rport=37360 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341986.587:33771): pid=348145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341986.587:33772): pid=348145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341986.617:33773): pid=348145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341986.617:33774): pid=348145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348146 suid=74 rport=37360 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341986.619:33775): pid=348145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341986.619:33776): pid=348145 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=237 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341986.619:33776): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3669dfd0 a2=1 a3=0 items=0 ppid=39353 pid=348145 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=237 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341986.619:33776): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341986.621:33777): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341986.660:33778): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.662:33779): pid=348148 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341986.664:33780): pid=348148 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341986.707:33781): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341986.707:33782): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341986.708:33783): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341986.772:33784): pid=348149 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341986.772:33785): pid=348149 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341986.773:33786): pid=348149 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341986.776:33787): pid=348149 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341986.928:33788): prog-id=1483 op=LOAD type=SYSCALL msg=audit(1781341986.928:33788): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd4523b7d0 a2=90 a3=9500000000 items=0 ppid=348178 pid=348179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341986.928:33788): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623561376132623862376234396531656431313239313438333963613966 type=SERVICE_START msg=audit(1781341987.002:33789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341987.019:33790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341987.020:33791): pid=348149 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341987.021:33792): pid=348149 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341987.024:33793): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348148 suid=0 rport=37360 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341987.024:33794): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341987.026:33795): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341987.027:33796): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341987.028:33797): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341987.028:33798): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341987.028:33799): pid=348145 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341987.151:33800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341987.808:33801): pid=347090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347093 suid=74 rport=37780 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341987.810:33802): pid=347090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347093 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341987.811:33803): pid=347090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341987.811:33804): pid=347090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341988.821:33805): pid=348209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341988.822:33806): pid=348208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348209 suid=74 rport=37368 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341988.822:33807): pid=348208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348209 suid=74 rport=37368 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341988.903:33808): pid=348208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341988.903:33809): pid=348208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341988.932:33810): pid=348208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341988.932:33811): pid=348208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348209 suid=74 rport=37368 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341988.935:33812): pid=348208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341988.935:33813): pid=348208 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=238 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341988.935:33813): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb72e47a0 a2=1 a3=0 items=0 ppid=39353 pid=348208 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=238 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341988.935:33813): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341988.937:33814): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341988.971:33815): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341988.972:33816): pid=348211 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341988.974:33817): pid=348211 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341989.017:33818): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341989.017:33819): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341989.021:33820): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341989.093:33821): pid=348212 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341989.093:33822): pid=348212 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F766F6C756D652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341989.096:33823): pid=348212 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341989.102:33824): pid=348212 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341989.118:33825): pid=348212 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341989.119:33826): pid=348212 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341989.121:33827): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348211 suid=0 rport=37368 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341989.122:33828): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341989.124:33829): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341989.125:33830): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341989.126:33831): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341989.126:33832): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341989.126:33833): pid=348208 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781341989.394:33834): pid=346848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341989.812:33835): pid=348229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341989.813:33836): pid=348228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348229 suid=74 rport=37382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341989.814:33837): pid=348228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348229 suid=74 rport=37382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341989.893:33838): pid=348228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341989.893:33839): pid=348228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341989.927:33840): pid=348228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341989.927:33841): pid=348228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348229 suid=74 rport=37382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341989.930:33842): pid=348228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341989.930:33843): pid=348228 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=239 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341989.930:33843): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda44b6160 a2=1 a3=0 items=0 ppid=39353 pid=348228 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=239 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341989.930:33843): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341989.931:33844): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781341989.958:33845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.961:33846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.965:33847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.968:33848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.972:33849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.976:33850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.979:33851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.982:33852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.985:33853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.989:33854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.993:33855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341989.997:33856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341990.000:33857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781341990.023:33858): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341990.024:33859): pid=348318 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341990.025:33860): pid=348318 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341990.068:33861): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341990.068:33862): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341990.069:33863): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341990.112:33864): pid=348346 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341990.112:33865): pid=348346 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6261636B75702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341990.112:33866): pid=348346 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341990.117:33867): pid=348346 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341990.131:33868): pid=348346 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341990.131:33869): pid=348346 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341990.134:33870): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348318 suid=0 rport=37382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341990.134:33871): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341990.139:33872): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341990.139:33873): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341990.139:33874): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341990.139:33875): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341990.140:33876): pid=348228 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341990.349:33877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.362:33878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.404:33879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.432:33880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.500:33881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.616:33882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.702:33883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.717:33884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341990.769:33885): pid=348551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341990.771:33886): pid=348550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348551 suid=74 rport=37388 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341990.771:33887): pid=348550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348551 suid=74 rport=37388 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781341990.794:33888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341990.852:33889): pid=348550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341990.852:33890): pid=348550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.855:33891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341990.878:33892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341990.881:33893): pid=348550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341990.882:33894): pid=348550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348551 suid=74 rport=37388 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341990.884:33895): pid=348550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341990.884:33896): pid=348550 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=240 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341990.884:33896): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffcda69300 a2=1 a3=0 items=0 ppid=39353 pid=348550 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=240 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341990.884:33896): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341990.886:33897): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781341990.920:33898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781341990.926:33899): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341990.927:33900): pid=348556 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341990.929:33901): pid=348556 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781341990.930:33902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781341990.973:33903): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341990.973:33904): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341990.976:33905): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341991.050:33906): pid=348557 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341991.051:33907): pid=348557 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341991.052:33908): pid=348557 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341991.056:33909): pid=348557 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341991.072:33910): pid=348557 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341991.073:33911): pid=348557 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341991.076:33912): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348556 suid=0 rport=37388 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341991.077:33913): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341991.079:33914): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341991.079:33915): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341991.080:33916): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341991.080:33917): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341991.080:33918): pid=348550 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341991.735:33919): pid=348578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341991.737:33920): pid=348577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348578 suid=74 rport=37392 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341991.737:33921): pid=348577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348578 suid=74 rport=37392 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341991.825:33922): pid=348577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341991.825:33923): pid=348577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341991.853:33924): pid=348577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341991.854:33925): pid=348577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348578 suid=74 rport=37392 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341991.857:33926): pid=348577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341991.857:33927): pid=348577 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=241 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341991.857:33927): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc39ac93b0 a2=1 a3=0 items=0 ppid=39353 pid=348577 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341991.857:33927): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341991.859:33928): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341991.875:33929): pid=347372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347645 suid=74 rport=37830 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341991.875:33930): pid=347372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347645 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341991.882:33931): pid=347372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=347372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341991.882:33932): pid=347372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781341991.887:33933): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341991.889:33934): pid=348580 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341991.890:33935): pid=348580 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341991.934:33936): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341991.934:33937): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341991.937:33938): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341992.007:33939): pid=348581 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341992.007:33940): pid=348581 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341992.009:33941): pid=348581 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341992.012:33942): pid=348581 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341992.025:33943): pid=348581 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341992.025:33944): pid=348581 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.029:33945): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348580 suid=0 rport=37392 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.029:33946): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341992.031:33947): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341992.031:33948): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341992.032:33949): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341992.032:33950): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.032:33951): pid=348577 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.661:33952): pid=348597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341992.662:33953): pid=348596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348597 suid=74 rport=37396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341992.662:33954): pid=348596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348597 suid=74 rport=37396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341992.745:33955): pid=348596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341992.746:33956): pid=348596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341992.774:33957): pid=348596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341992.775:33958): pid=348596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348597 suid=74 rport=37396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341992.777:33959): pid=348596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341992.777:33960): pid=348596 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=242 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341992.777:33960): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffca5afb580 a2=1 a3=0 items=0 ppid=39353 pid=348596 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=242 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341992.777:33960): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341992.778:33961): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341992.810:33962): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.812:33963): pid=348599 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348599 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341992.813:33964): pid=348599 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341992.855:33965): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341992.855:33966): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.857:33967): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341992.912:33968): pid=348600 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341992.913:33969): pid=348600 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6261636B656E645F62696E64392E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341992.914:33970): pid=348600 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341992.917:33971): pid=348600 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341992.927:33972): pid=348600 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341992.927:33973): pid=348600 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.930:33974): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348599 suid=0 rport=37396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.930:33975): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348599 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341992.933:33976): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341992.933:33977): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341992.933:33978): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341992.933:33979): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341992.934:33980): pid=348596 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341993.024:33981): pid=346848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=346849 suid=74 rport=36938 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341993.025:33982): pid=346848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=346849 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341993.026:33983): pid=346848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=346848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341993.026:33984): pid=346848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341993.061:33985): pid=348615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341993.062:33986): pid=348572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=348615 suid=74 rport=39902 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341993.063:33987): pid=348572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=348615 suid=74 rport=39902 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341993.589:33988): pid=348617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341993.590:33989): pid=348616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348617 suid=74 rport=39050 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341993.590:33990): pid=348616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348617 suid=74 rport=39050 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781341993.646:33991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341993.653:33992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341993.655:33993): pid=348043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user3" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341993.666:33994): pid=348616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341993.666:33995): pid=348616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341993.697:33996): pid=348616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341993.697:33997): pid=348616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348617 suid=74 rport=39050 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341993.701:33998): pid=348616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341993.701:33999): pid=348616 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=243 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341993.701:33999): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7c9e0bd0 a2=1 a3=0 items=0 ppid=39353 pid=348616 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=243 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341993.701:33999): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341993.703:34000): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781341993.723:34001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341993.729:34002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341993.739:34003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781341993.782:34004): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341993.783:34005): pid=348681 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341993.786:34006): pid=348681 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341993.833:34007): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341993.833:34008): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341993.835:34009): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341993.893:34010): pid=348697 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341993.893:34011): pid=348697 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341993.894:34012): pid=348697 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341993.896:34013): pid=348697 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341993.908:34014): pid=348697 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341993.908:34015): pid=348697 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341993.911:34016): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348681 suid=0 rport=39050 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341993.912:34017): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341993.914:34018): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341993.914:34019): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341993.915:34020): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341993.915:34021): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341993.915:34022): pid=348616 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341993.992:34023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341994.060:34024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341994.120:34025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341994.168:34026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781341994.421:34027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341994.499:34028): pid=348767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341994.500:34029): pid=348766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348767 suid=74 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341994.501:34030): pid=348766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348767 suid=74 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341994.582:34031): pid=348766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341994.582:34032): pid=348766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341994.612:34033): pid=348766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341994.612:34034): pid=348766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348767 suid=74 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341994.615:34035): pid=348766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341994.615:34036): pid=348766 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=244 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341994.615:34036): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc32468260 a2=1 a3=0 items=0 ppid=39353 pid=348766 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=244 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341994.615:34036): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341994.616:34037): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341994.650:34038): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341994.651:34039): pid=348769 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341994.653:34040): pid=348769 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341994.697:34041): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341994.697:34042): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341994.698:34043): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341994.764:34044): pid=348770 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341994.765:34045): pid=348770 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F70726F64756365722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341994.766:34046): pid=348770 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341994.771:34047): pid=348770 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341994.787:34048): pid=348770 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341994.787:34049): pid=348770 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341994.790:34050): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348769 suid=0 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341994.790:34051): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341994.793:34052): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341994.793:34053): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341994.794:34054): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341994.794:34055): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341994.794:34056): pid=348766 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341995.436:34057): pid=348844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348844 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341995.437:34058): pid=348843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348844 suid=74 rport=39066 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341995.437:34059): pid=348843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348844 suid=74 rport=39066 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341995.512:34060): pid=348843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341995.513:34061): pid=348843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341995.536:34062): pid=348843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341995.536:34063): pid=348843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348844 suid=74 rport=39066 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341995.538:34064): pid=348843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341995.538:34065): pid=348843 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=245 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341995.538:34065): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffcef3a090 a2=1 a3=0 items=0 ppid=39353 pid=348843 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341995.538:34065): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341995.540:34066): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341995.571:34067): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341995.572:34068): pid=348846 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341995.573:34069): pid=348846 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341995.616:34070): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341995.616:34071): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341995.618:34072): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341995.665:34073): pid=348847 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341995.665:34074): pid=348847 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6D646E732E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341995.666:34075): pid=348847 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341995.668:34076): pid=348847 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341995.678:34077): pid=348847 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341995.678:34078): pid=348847 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341995.680:34079): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348846 suid=0 rport=39066 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341995.680:34080): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341995.683:34081): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341995.683:34082): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341995.684:34083): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341995.684:34084): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341995.684:34085): pid=348843 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348843 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.297:34086): pid=348863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341996.298:34087): pid=348862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348863 suid=74 rport=39076 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341996.298:34088): pid=348862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348863 suid=74 rport=39076 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341996.374:34089): pid=348862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341996.374:34090): pid=348862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341996.403:34091): pid=348862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341996.403:34092): pid=348862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348863 suid=74 rport=39076 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341996.405:34093): pid=348862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341996.405:34094): pid=348862 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=246 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341996.405:34094): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc7d428340 a2=1 a3=0 items=0 ppid=39353 pid=348862 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=246 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341996.405:34094): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341996.407:34095): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341996.434:34096): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.436:34097): pid=348865 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341996.437:34098): pid=348865 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341996.479:34099): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341996.479:34100): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.482:34101): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348866 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341996.542:34102): pid=348866 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341996.542:34103): pid=348866 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341996.543:34104): pid=348866 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341996.546:34105): pid=348866 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341996.559:34106): pid=348866 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341996.559:34107): pid=348866 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.561:34108): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348865 suid=0 rport=39076 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.562:34109): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341996.564:34110): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341996.564:34111): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341996.565:34112): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341996.565:34113): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.565:34114): pid=348862 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348862 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.586:34115): pid=348882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341996.587:34116): pid=348881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348882 suid=74 rport=39078 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341996.587:34117): pid=348881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348882 suid=74 rport=39078 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341996.664:34118): pid=348881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341996.664:34119): pid=348881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341996.692:34120): pid=348881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341996.693:34121): pid=348881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348882 suid=74 rport=39078 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341996.695:34122): pid=348881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341996.695:34123): pid=348881 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=247 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341996.695:34123): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffccbdbda20 a2=1 a3=0 items=0 ppid=39353 pid=348881 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=247 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341996.695:34123): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341996.697:34124): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341996.725:34125): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.726:34126): pid=348884 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341996.727:34127): pid=348884 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341996.770:34128): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341996.770:34129): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341996.772:34130): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341996.837:34131): pid=348885 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341996.837:34132): pid=348885 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341996.838:34133): pid=348885 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341996.842:34134): pid=348885 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341997.002:34135): prog-id=1484 op=LOAD type=SYSCALL msg=audit(1781341997.002:34135): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcba5acc00 a2=90 a3=9500000000 items=0 ppid=348913 pid=348914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341997.002:34135): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333966323765653864313365336635353533626531386665386337316630 type=SERVICE_START msg=audit(1781341997.082:34136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781341997.102:34137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341997.104:34138): pid=348885 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341997.105:34139): pid=348885 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341997.108:34140): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348884 suid=0 rport=39078 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341997.108:34141): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341997.111:34142): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341997.112:34143): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341997.112:34144): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341997.112:34145): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341997.113:34146): pid=348881 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781341997.419:34147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341997.722:34148): pid=348043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348117 suid=74 rport=39852 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341997.723:34149): pid=348043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348117 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781341997.723:34150): pid=348043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781341997.723:34151): pid=348043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781341998.311:34152): pid=348572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341998.781:34153): pid=348953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341998.782:34154): pid=348952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348953 suid=74 rport=39088 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341998.782:34155): pid=348952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348953 suid=74 rport=39088 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341998.861:34156): pid=348952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341998.861:34157): pid=348952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341998.890:34158): pid=348952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341998.891:34159): pid=348952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348953 suid=74 rport=39088 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341998.893:34160): pid=348952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341998.893:34161): pid=348952 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=248 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341998.893:34161): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdad5c4330 a2=1 a3=0 items=0 ppid=39353 pid=348952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=248 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341998.893:34161): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341998.895:34162): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341998.924:34163): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341998.925:34164): pid=348955 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341998.927:34165): pid=348955 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341998.970:34166): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341998.970:34167): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341998.972:34168): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341999.036:34169): pid=348956 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341999.036:34170): pid=348956 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341999.037:34171): pid=348956 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341999.041:34172): pid=348956 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341999.056:34173): pid=348956 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341999.057:34174): pid=348956 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.060:34175): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348955 suid=0 rport=39088 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.061:34176): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341999.063:34177): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341999.064:34178): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341999.064:34179): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341999.064:34180): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.065:34181): pid=348952 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.084:34182): pid=348972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341999.085:34183): pid=348971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348972 suid=74 rport=39104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341999.085:34184): pid=348971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=348972 suid=74 rport=39104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781341999.163:34185): pid=348971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341999.163:34186): pid=348971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781341999.192:34187): pid=348971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781341999.192:34188): pid=348971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348972 suid=74 rport=39104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781341999.194:34189): pid=348971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781341999.194:34190): pid=348971 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=249 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781341999.194:34190): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd61545c90 a2=1 a3=0 items=0 ppid=39353 pid=348971 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=249 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341999.194:34190): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781341999.196:34191): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341999.230:34192): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.232:34193): pid=348974 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781341999.233:34194): pid=348974 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781341999.276:34195): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781341999.276:34196): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.278:34197): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781341999.340:34198): pid=348975 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781341999.340:34199): pid=348975 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781341999.340:34200): pid=348975 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781341999.343:34201): pid=348975 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781341999.509:34202): prog-id=1485 op=LOAD type=SYSCALL msg=audit(1781341999.509:34202): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe45346dd0 a2=90 a3=9500000000 items=0 ppid=349003 pid=349004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781341999.509:34202): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363334393137396265376338646335336163343161633065396236663836 type=SERVICE_START msg=audit(1781341999.544:34203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781341999.546:34204): pid=348975 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341999.546:34205): pid=348975 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.550:34206): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348974 suid=0 rport=39104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.550:34207): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781341999.553:34208): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781341999.554:34209): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781341999.555:34210): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781341999.555:34211): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.555:34212): pid=348971 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781341999.777:34213): pid=349035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781341999.778:34214): pid=348948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349035 suid=74 rport=51318 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781341999.778:34215): pid=348948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349035 suid=74 rport=51318 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342001.159:34216): pid=349037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342001.160:34217): pid=349036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349037 suid=74 rport=39110 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342001.161:34218): pid=349036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349037 suid=74 rport=39110 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342001.237:34219): pid=349036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342001.237:34220): pid=349036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342001.266:34221): pid=349036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342001.267:34222): pid=349036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349037 suid=74 rport=39110 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342001.269:34223): pid=349036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342001.269:34224): pid=349036 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=250 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342001.269:34224): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe701ea980 a2=1 a3=0 items=0 ppid=39353 pid=349036 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342001.269:34224): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342001.271:34225): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342001.306:34226): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.307:34227): pid=349039 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342001.309:34228): pid=349039 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342001.351:34229): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342001.351:34230): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.353:34231): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342001.418:34232): pid=349040 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342001.418:34233): pid=349040 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342001.419:34234): pid=349040 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342001.423:34235): pid=349040 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342001.439:34236): pid=349040 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342001.440:34237): pid=349040 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.443:34238): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349039 suid=0 rport=39110 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.443:34239): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342001.446:34240): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342001.446:34241): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342001.447:34242): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342001.447:34243): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.447:34244): pid=349036 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.469:34245): pid=349056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342001.470:34246): pid=349055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349056 suid=74 rport=39122 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342001.470:34247): pid=349055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349056 suid=74 rport=39122 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342001.549:34248): pid=349055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342001.549:34249): pid=349055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342001.578:34250): pid=349055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342001.579:34251): pid=349055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349056 suid=74 rport=39122 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342001.581:34252): pid=349055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342001.581:34253): pid=349055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=251 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342001.581:34253): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc3c6fd040 a2=1 a3=0 items=0 ppid=39353 pid=349055 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=251 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342001.581:34253): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342001.583:34254): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342001.619:34255): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.620:34256): pid=349058 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342001.622:34257): pid=349058 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342001.665:34258): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342001.665:34259): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.666:34260): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342001.728:34261): pid=349059 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342001.728:34262): pid=349059 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342001.729:34263): pid=349059 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342001.733:34264): pid=349059 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342001.894:34265): prog-id=1486 op=LOAD type=SYSCALL msg=audit(1781342001.894:34265): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe2b5ada10 a2=90 a3=9500000000 items=0 ppid=349088 pid=349089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342001.894:34265): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376539643638656366616261643764336464663733326330643962643561 type=SERVICE_START msg=audit(1781342001.967:34266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342001.982:34267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342001.984:34268): pid=349059 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342001.985:34269): pid=349059 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.988:34270): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349058 suid=0 rport=39122 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.989:34271): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342001.992:34272): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342001.993:34273): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342001.994:34274): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342001.994:34275): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342001.994:34276): pid=349055 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342002.099:34277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342003.121:34278): pid=348572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348615 suid=74 rport=39902 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342003.122:34279): pid=348572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348615 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342003.124:34280): pid=348572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342003.124:34281): pid=348572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342003.703:34282): pid=349117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342003.704:34283): pid=349116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349117 suid=74 rport=35158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342003.704:34284): pid=349116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349117 suid=74 rport=35158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342003.797:34285): pid=349116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342003.797:34286): pid=349116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342003.827:34287): pid=349116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342003.827:34288): pid=349116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349117 suid=74 rport=35158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342003.830:34289): pid=349116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342003.830:34290): pid=349116 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=252 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342003.830:34290): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc9a714c50 a2=1 a3=0 items=0 ppid=39353 pid=349116 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=252 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342003.830:34290): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342003.832:34291): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342003.854:34292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342003.873:34293): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342003.875:34294): pid=349125 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342003.876:34295): pid=349125 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342003.920:34296): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342003.920:34297): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342003.921:34298): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342003.994:34299): pid=349132 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342003.995:34300): pid=349132 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342003.997:34301): pid=349132 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342004.003:34302): pid=349132 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342004.018:34303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342004.023:34304): pid=349132 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342004.023:34305): pid=349132 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.026:34306): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349125 suid=0 rport=35158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.027:34307): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349125 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342004.029:34308): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342004.030:34309): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342004.031:34310): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342004.031:34311): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.031:34312): pid=349116 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.059:34313): pid=349164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342004.061:34314): pid=349163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349164 suid=74 rport=35168 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342004.061:34315): pid=349163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349164 suid=74 rport=35168 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342004.154:34316): pid=349163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342004.154:34317): pid=349163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342004.186:34318): pid=349163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342004.187:34319): pid=349163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349164 suid=74 rport=35168 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342004.190:34320): pid=349163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342004.190:34321): pid=349163 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=253 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342004.190:34321): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff74895730 a2=1 a3=0 items=0 ppid=39353 pid=349163 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=253 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342004.190:34321): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342004.191:34322): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342004.229:34323): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.231:34324): pid=349166 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342004.233:34325): pid=349166 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342004.276:34326): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342004.276:34327): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.279:34328): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342004.345:34329): pid=349167 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342004.346:34330): pid=349167 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342004.346:34331): pid=349167 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342004.349:34332): pid=349167 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342004.521:34333): prog-id=1487 op=LOAD type=SYSCALL msg=audit(1781342004.521:34333): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd37b9f4e0 a2=90 a3=9500000000 items=0 ppid=349196 pid=349197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342004.521:34333): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303832383738376436386532623264316236626437393139363561393436 type=SERVICE_START msg=audit(1781342004.597:34334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342004.606:34335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342004.609:34336): pid=349167 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342004.609:34337): pid=349167 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.614:34338): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349166 suid=0 rport=35168 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.614:34339): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342004.618:34340): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342004.618:34341): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342004.619:34342): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342004.619:34343): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342004.619:34344): pid=349163 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342004.729:34345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342005.065:34346): pid=348948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342005.204:34347): pid=349226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342005.206:34348): pid=349162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349226 suid=74 rport=42872 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342005.206:34349): pid=349162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349226 suid=74 rport=42872 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342005.993:34350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342005.998:34351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342006.001:34352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342006.189:34353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342006.218:34354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342006.363:34355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342006.365:34356): pid=349307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342006.366:34357): pid=349306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349307 suid=74 rport=35174 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342006.366:34358): pid=349306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349307 suid=74 rport=35174 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342006.446:34359): pid=349306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342006.446:34360): pid=349306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342006.475:34361): pid=349306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342006.475:34362): pid=349306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349307 suid=74 rport=35174 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342006.478:34363): pid=349306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342006.478:34364): pid=349306 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=254 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342006.478:34364): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa968d410 a2=1 a3=0 items=0 ppid=39353 pid=349306 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=254 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342006.478:34364): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342006.479:34365): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342006.511:34366): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.513:34367): pid=349309 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342006.514:34368): pid=349309 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342006.558:34369): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342006.558:34370): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.559:34371): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342006.627:34372): pid=349310 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342006.628:34373): pid=349310 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342006.629:34374): pid=349310 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342006.634:34375): pid=349310 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342006.665:34376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342006.670:34377): pid=349310 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342006.670:34378): pid=349310 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.674:34379): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349309 suid=0 rport=35174 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.674:34380): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342006.677:34381): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342006.677:34382): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342006.678:34383): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342006.678:34384): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.678:34385): pid=349306 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.697:34386): pid=349332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342006.698:34387): pid=349331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349332 suid=74 rport=35186 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342006.698:34388): pid=349331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349332 suid=74 rport=35186 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342006.777:34389): pid=349331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342006.777:34390): pid=349331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342006.806:34391): pid=349331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342006.807:34392): pid=349331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349332 suid=74 rport=35186 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342006.809:34393): pid=349331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342006.810:34394): pid=349331 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=255 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342006.810:34394): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe6c94abe0 a2=1 a3=0 items=0 ppid=39353 pid=349331 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=255 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342006.810:34394): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342006.811:34395): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342006.851:34396): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.852:34397): pid=349356 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342006.854:34398): pid=349356 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342006.898:34399): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342006.899:34400): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342006.901:34401): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342006.966:34402): pid=349357 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342006.967:34403): pid=349357 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342006.968:34404): pid=349357 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342006.972:34405): pid=349357 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342007.135:34406): prog-id=1488 op=LOAD type=SYSCALL msg=audit(1781342007.135:34406): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5c65cb00 a2=90 a3=9500000000 items=0 ppid=349386 pid=349387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342007.135:34406): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396362373164326263646233376261383333666162363166323237316134 type=SERVICE_START msg=audit(1781342007.208:34407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342007.229:34408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_neutron_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342007.229:34409): pid=349357 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342007.230:34410): pid=349357 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342007.233:34411): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349356 suid=0 rport=35186 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342007.233:34412): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342007.235:34413): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342007.236:34414): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342007.236:34415): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342007.236:34416): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342007.236:34417): pid=349331 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342007.524:34418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342008.270:34419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342009.023:34420): pid=349423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342009.024:34421): pid=349422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349423 suid=74 rport=35198 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342009.024:34422): pid=349422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349423 suid=74 rport=35198 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342009.111:34423): pid=349422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342009.111:34424): pid=349422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342009.141:34425): pid=349422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342009.142:34426): pid=349422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349423 suid=74 rport=35198 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342009.145:34427): pid=349422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342009.145:34428): pid=349422 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=256 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342009.145:34428): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff642f6f30 a2=1 a3=0 items=0 ppid=39353 pid=349422 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=256 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342009.145:34428): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342009.146:34429): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342009.177:34430): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.178:34431): pid=349425 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342009.180:34432): pid=349425 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342009.224:34433): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342009.224:34434): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.226:34435): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342009.295:34436): pid=349426 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342009.296:34437): pid=349426 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342009.297:34438): pid=349426 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342009.301:34439): pid=349426 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342009.316:34440): pid=349426 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342009.316:34441): pid=349426 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.319:34442): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349425 suid=0 rport=35198 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.319:34443): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342009.321:34444): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342009.322:34445): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342009.323:34446): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342009.323:34447): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.323:34448): pid=349422 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.344:34449): pid=349442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349442 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342009.346:34450): pid=349441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349442 suid=74 rport=35204 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342009.346:34451): pid=349441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349442 suid=74 rport=35204 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342009.421:34452): pid=349441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342009.421:34453): pid=349441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342009.450:34454): pid=349441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342009.450:34455): pid=349441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349442 suid=74 rport=35204 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342009.453:34456): pid=349441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342009.453:34457): pid=349441 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342009.453:34457): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe544031e0 a2=1 a3=0 items=0 ppid=39353 pid=349441 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=257 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342009.453:34457): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342009.455:34458): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342009.490:34459): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.491:34460): pid=349444 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342009.493:34461): pid=349444 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342009.535:34462): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342009.535:34463): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.537:34464): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342009.595:34465): pid=349445 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342009.595:34466): pid=349445 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342009.596:34467): pid=349445 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342009.599:34468): pid=349445 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342009.771:34469): prog-id=1489 op=LOAD type=SYSCALL msg=audit(1781342009.771:34469): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffefdc6b420 a2=90 a3=9500000000 items=0 ppid=349473 pid=349474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342009.771:34469): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623538663362346462623064393138356133356231393638383665336230 type=SERVICE_START msg=audit(1781342009.847:34470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342009.862:34471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_placement_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342009.864:34472): pid=349445 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342009.865:34473): pid=349445 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.868:34474): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349444 suid=0 rport=35204 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.869:34475): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342009.871:34476): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342009.871:34477): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342009.872:34478): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342009.872:34479): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342009.872:34480): pid=349441 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342010.150:34481): pid=348948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349035 suid=74 rport=51318 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342010.152:34482): pid=348948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349035 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342010.153:34483): pid=348948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=348948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342010.153:34484): pid=348948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342011.484:34485): pid=349162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342011.668:34486): pid=349523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342011.669:34487): pid=349522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349523 suid=74 rport=35220 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342011.670:34488): pid=349522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349523 suid=74 rport=35220 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342011.746:34489): pid=349522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342011.746:34490): pid=349522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342011.776:34491): pid=349522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342011.777:34492): pid=349522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349523 suid=74 rport=35220 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342011.779:34493): pid=349522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342011.779:34494): pid=349522 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342011.779:34494): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3c82a670 a2=1 a3=0 items=0 ppid=39353 pid=349522 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=258 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342011.779:34494): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342011.780:34495): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342011.809:34496): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342011.810:34497): pid=349525 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342011.812:34498): pid=349525 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342011.854:34499): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342011.854:34500): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342011.857:34501): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342011.921:34502): pid=349526 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342011.921:34503): pid=349526 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342011.922:34504): pid=349526 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342011.925:34505): pid=349526 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342011.941:34506): pid=349526 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342011.942:34507): pid=349526 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342011.944:34508): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349525 suid=0 rport=35220 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342011.945:34509): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342011.950:34510): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342011.950:34511): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342011.950:34512): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342011.950:34513): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342011.951:34514): pid=349522 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342011.972:34515): pid=349542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342011.973:34516): pid=349541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349542 suid=74 rport=35222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342011.973:34517): pid=349541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349542 suid=74 rport=35222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342012.046:34518): pid=349541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342012.046:34519): pid=349541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342012.078:34520): pid=349541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342012.080:34521): pid=349541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349542 suid=74 rport=35222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342012.082:34522): pid=349541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342012.082:34523): pid=349541 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=259 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342012.082:34523): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff29699eb0 a2=1 a3=0 items=0 ppid=39353 pid=349541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=259 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342012.082:34523): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342012.084:34524): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342012.102:34525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342012.116:34526): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342012.118:34527): pid=349545 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342012.119:34528): pid=349545 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342012.161:34529): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342012.161:34530): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342012.163:34531): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342012.227:34532): pid=349557 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342012.227:34533): pid=349557 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342012.228:34534): pid=349557 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342012.232:34535): pid=349557 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342012.263:34536): pid=349587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349587 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342012.265:34537): pid=349521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349587 suid=74 rport=42918 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342012.265:34538): pid=349521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349587 suid=74 rport=42918 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342012.407:34539): prog-id=1490 op=LOAD type=SYSCALL msg=audit(1781342012.407:34539): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbbd6b980 a2=90 a3=9500000000 items=0 ppid=349599 pid=349600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342012.407:34539): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663931336166383763646261646163303463346339393638393036373363 type=SERVICE_START msg=audit(1781342012.479:34540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342012.493:34541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342012.496:34542): pid=349557 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342012.496:34543): pid=349557 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342012.500:34544): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349545 suid=0 rport=35222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342012.500:34545): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342012.503:34546): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342012.503:34547): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342012.504:34548): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342012.504:34549): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342012.504:34550): pid=349541 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342012.622:34551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342014.211:34552): pid=349630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342014.212:34553): pid=349629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349630 suid=74 rport=38748 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342014.213:34554): pid=349629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349630 suid=74 rport=38748 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342014.290:34555): pid=349629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342014.290:34556): pid=349629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342014.321:34557): pid=349629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342014.321:34558): pid=349629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349630 suid=74 rport=38748 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342014.323:34559): pid=349629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342014.324:34560): pid=349629 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=260 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342014.324:34560): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc00b58250 a2=1 a3=0 items=0 ppid=39353 pid=349629 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=260 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342014.324:34560): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342014.325:34561): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342014.357:34562): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.358:34563): pid=349632 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342014.359:34564): pid=349632 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342014.403:34565): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342014.403:34566): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.405:34567): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342014.469:34568): pid=349633 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342014.469:34569): pid=349633 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342014.471:34570): pid=349633 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342014.476:34571): pid=349633 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342014.494:34572): pid=349633 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342014.494:34573): pid=349633 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.497:34574): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349632 suid=0 rport=38748 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.497:34575): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342014.500:34576): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342014.501:34577): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342014.501:34578): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342014.502:34579): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.502:34580): pid=349629 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.525:34581): pid=349649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342014.527:34582): pid=349648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349649 suid=74 rport=38758 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342014.527:34583): pid=349648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349649 suid=74 rport=38758 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342014.604:34584): pid=349648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342014.604:34585): pid=349648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342014.623:34586): pid=349648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342014.623:34587): pid=349648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349649 suid=74 rport=38758 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342014.626:34588): pid=349648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342014.626:34589): pid=349648 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=261 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342014.626:34589): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde81d3d10 a2=1 a3=0 items=0 ppid=39353 pid=349648 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342014.626:34589): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342014.627:34590): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342014.647:34591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342014.664:34592): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.666:34593): pid=349657 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342014.667:34594): pid=349657 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342014.709:34595): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342014.709:34596): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342014.711:34597): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342014.791:34598): pid=349667 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342014.792:34599): pid=349667 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342014.793:34600): pid=349667 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342014.797:34601): pid=349667 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342014.810:34602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342014.960:34603): prog-id=1491 op=LOAD type=SYSCALL msg=audit(1781342014.960:34603): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe9847cfe0 a2=90 a3=9500000000 items=0 ppid=349731 pid=349732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342014.960:34603): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306534353537376262393937643664336133643866653234303130666139 type=SERVICE_START msg=audit(1781342015.125:34604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342015.134:34605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342015.139:34606): pid=349667 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342015.139:34607): pid=349667 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342015.143:34608): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349657 suid=0 rport=38758 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342015.144:34609): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342015.147:34610): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342015.148:34611): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342015.149:34612): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342015.149:34613): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342015.149:34614): pid=349648 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342015.279:34615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342015.450:34616): pid=349162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349226 suid=74 rport=42872 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342015.450:34617): pid=349162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349226 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342015.452:34618): pid=349162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342015.452:34619): pid=349162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342016.906:34620): pid=349843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349843 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342016.907:34621): pid=349842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349843 suid=74 rport=38764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342016.907:34622): pid=349842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349843 suid=74 rport=38764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342016.990:34623): pid=349842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342016.990:34624): pid=349842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342017.021:34625): pid=349842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342017.022:34626): pid=349842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349843 suid=74 rport=38764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342017.024:34627): pid=349842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342017.024:34628): pid=349842 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=262 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342017.024:34628): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc622eed60 a2=1 a3=0 items=0 ppid=39353 pid=349842 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=262 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342017.024:34628): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342017.026:34629): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342017.059:34630): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.061:34631): pid=349846 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342017.062:34632): pid=349846 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_AUTH msg=audit(1781342017.064:34633): pid=349521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342017.104:34634): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342017.104:34635): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.107:34636): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342017.175:34637): pid=349847 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342017.175:34638): pid=349847 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342017.176:34639): pid=349847 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342017.181:34640): pid=349847 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342017.200:34641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342017.209:34642): pid=349847 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342017.209:34643): pid=349847 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.213:34644): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349846 suid=0 rport=38764 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.213:34645): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342017.216:34646): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342017.216:34647): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342017.217:34648): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342017.217:34649): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.217:34650): pid=349842 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.241:34651): pid=349872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342017.242:34652): pid=349868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349872 suid=74 rport=38776 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342017.242:34653): pid=349868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349872 suid=74 rport=38776 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342017.324:34654): pid=349868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342017.324:34655): pid=349868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342017.355:34656): pid=349868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342017.355:34657): pid=349868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349872 suid=74 rport=38776 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342017.357:34658): pid=349868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342017.357:34659): pid=349868 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=263 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342017.357:34659): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd0b2db390 a2=1 a3=0 items=0 ppid=39353 pid=349868 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=263 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342017.357:34659): proctitle=737368643A20726F6F74205B707269765D type=SERVICE_STOP msg=audit(1781342017.357:34660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781342017.359:34661): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342017.390:34662): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.391:34663): pid=349885 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342017.393:34664): pid=349885 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342017.435:34665): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342017.435:34666): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.439:34667): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342017.509:34668): pid=349886 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342017.509:34669): pid=349886 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342017.511:34670): pid=349886 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342017.515:34671): pid=349886 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342017.682:34672): prog-id=1492 op=LOAD type=SYSCALL msg=audit(1781342017.682:34672): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc747a0a10 a2=90 a3=9500000000 items=0 ppid=349916 pid=349917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342017.682:34672): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336363333138653935613865653931313232356434383235663537626431 type=SERVICE_START msg=audit(1781342017.757:34673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342017.772:34674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342017.774:34675): pid=349886 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342017.774:34676): pid=349886 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.779:34677): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349885 suid=0 rport=38776 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.779:34678): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342017.783:34679): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342017.783:34680): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342017.784:34681): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342017.784:34682): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342017.784:34683): pid=349868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342017.894:34684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342018.674:34685): pid=349943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342018.676:34686): pid=349907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349943 suid=74 rport=54326 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342018.676:34687): pid=349907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=349943 suid=74 rport=54326 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342019.560:34688): pid=349945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342019.561:34689): pid=349944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349945 suid=74 rport=38782 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342019.561:34690): pid=349944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349945 suid=74 rport=38782 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342019.650:34691): pid=349944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342019.650:34692): pid=349944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342019.680:34693): pid=349944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342019.681:34694): pid=349944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349945 suid=74 rport=38782 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342019.683:34695): pid=349944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342019.683:34696): pid=349944 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=264 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342019.683:34696): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff99169c00 a2=1 a3=0 items=0 ppid=39353 pid=349944 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=264 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342019.683:34696): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342019.685:34697): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342019.713:34698): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342019.714:34699): pid=349947 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342019.716:34700): pid=349947 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342019.759:34701): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342019.759:34702): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342019.760:34703): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342019.815:34704): pid=349948 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342019.815:34705): pid=349948 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342019.816:34706): pid=349948 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342019.820:34707): pid=349948 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342019.835:34708): pid=349948 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342019.835:34709): pid=349948 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342019.838:34710): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349947 suid=0 rport=38782 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342019.838:34711): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342019.841:34712): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342019.842:34713): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342019.842:34714): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342019.842:34715): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342019.842:34716): pid=349944 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342019.868:34717): pid=349964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342019.869:34718): pid=349963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349964 suid=74 rport=38784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342019.869:34719): pid=349963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=349964 suid=74 rport=38784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342019.957:34720): pid=349963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342019.957:34721): pid=349963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342019.985:34722): pid=349963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342019.985:34723): pid=349963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349964 suid=74 rport=38784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342019.988:34724): pid=349963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342019.988:34725): pid=349963 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=265 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342019.988:34725): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffebb29c620 a2=1 a3=0 items=0 ppid=39353 pid=349963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=265 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342019.988:34725): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342019.989:34726): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342020.022:34727): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342020.023:34728): pid=349966 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342020.024:34729): pid=349966 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342020.047:34730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342020.067:34731): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342020.068:34732): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342020.070:34733): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342020.138:34734): pid=349967 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342020.138:34735): pid=349967 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342020.140:34736): pid=349967 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342020.145:34737): pid=349967 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342020.282:34738): prog-id=1493 op=LOAD type=SYSCALL msg=audit(1781342020.282:34738): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffed2719530 a2=90 a3=9500000000 items=0 ppid=349995 pid=349996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342020.282:34738): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343866646430663634326466313064316436623737373135343630313662 type=SERVICE_START msg=audit(1781342020.355:34739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.365:34740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.372:34741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.373:34742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342020.375:34743): pid=349967 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342020.375:34744): pid=349967 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342020.379:34745): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349966 suid=0 rport=38784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342020.379:34746): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342020.384:34747): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342020.384:34748): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342020.385:34749): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342020.385:34750): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342020.385:34751): pid=349963 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342020.456:34752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.461:34753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.521:34754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342020.604:34755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.634:34756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342020.642:34757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.721:34758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.726:34759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342020.727:34760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342020.749:34761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342020.797:34762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.816:34763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342020.864:34764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.881:34765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.884:34766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342020.885:34767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.961:34768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342020.964:34769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342021.015:34770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342021.061:34771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342021.089:34772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342021.117:34773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342021.354:34774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342021.363:34775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342021.463:34776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342021.854:34777): pid=349521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349587 suid=74 rport=42918 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342021.855:34778): pid=349521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349587 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342021.856:34779): pid=349521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342021.856:34780): pid=349521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342022.111:34781): pid=350346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342022.113:34782): pid=350345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350346 suid=74 rport=38788 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342022.113:34783): pid=350345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350346 suid=74 rport=38788 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342022.189:34784): pid=350345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342022.189:34785): pid=350345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342022.219:34786): pid=350345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342022.219:34787): pid=350345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350346 suid=74 rport=38788 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342022.222:34788): pid=350345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342022.222:34789): pid=350345 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=266 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342022.222:34789): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeeb42bb20 a2=1 a3=0 items=0 ppid=39353 pid=350345 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=266 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342022.222:34789): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342022.223:34790): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342022.260:34791): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.261:34792): pid=350348 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342022.263:34793): pid=350348 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342022.296:34794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342022.306:34795): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342022.306:34796): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.309:34797): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342022.368:34798): pid=350349 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342022.368:34799): pid=350349 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342022.370:34800): pid=350349 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342022.374:34801): pid=350349 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342022.387:34802): pid=350349 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342022.387:34803): pid=350349 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.390:34804): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350348 suid=0 rport=38788 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.390:34805): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342022.392:34806): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342022.392:34807): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342022.393:34808): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342022.393:34809): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.393:34810): pid=350345 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.417:34811): pid=350366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342022.419:34812): pid=350365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350366 suid=74 rport=38804 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342022.419:34813): pid=350365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350366 suid=74 rport=38804 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342022.496:34814): pid=350365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342022.496:34815): pid=350365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342022.527:34816): pid=350365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342022.527:34817): pid=350365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350366 suid=74 rport=38804 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342022.530:34818): pid=350365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342022.530:34819): pid=350365 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=267 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342022.530:34819): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffaf8a9560 a2=1 a3=0 items=0 ppid=39353 pid=350365 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=267 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342022.530:34819): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342022.532:34820): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342022.566:34821): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.567:34822): pid=350368 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342022.569:34823): pid=350368 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342022.612:34824): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342022.612:34825): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.614:34826): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342022.679:34827): pid=350369 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342022.679:34828): pid=350369 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342022.680:34829): pid=350369 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342022.683:34830): pid=350369 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342022.849:34831): prog-id=1494 op=LOAD type=SYSCALL msg=audit(1781342022.849:34831): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd742a1550 a2=90 a3=9500000000 items=0 ppid=350397 pid=350398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342022.849:34831): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342022.938:34832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342022.952:34833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342022.956:34834): pid=350369 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342022.956:34835): pid=350369 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.960:34836): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350368 suid=0 rport=38804 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.961:34837): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342022.965:34838): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342022.966:34839): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342022.967:34840): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342022.967:34841): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342022.967:34842): pid=350365 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342023.117:34843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342023.496:34844): pid=349907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="tom" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342024.909:34845): pid=350427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342024.911:34846): pid=350426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350427 suid=74 rport=35160 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342024.911:34847): pid=350426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350427 suid=74 rport=35160 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342024.990:34848): pid=350426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342024.991:34849): pid=350426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342024.994:34850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342024.997:34851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342024.999:34852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342025.001:34853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342025.003:34854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342025.020:34855): pid=350426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342025.021:34856): pid=350426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350427 suid=74 rport=35160 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342025.024:34857): pid=350426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342025.024:34858): pid=350426 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=268 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342025.024:34858): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe27b011d0 a2=1 a3=0 items=0 ppid=39353 pid=350426 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=268 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342025.024:34858): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342025.027:34859): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342025.056:34860): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.058:34861): pid=350473 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342025.059:34862): pid=350473 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342025.102:34863): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342025.102:34864): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.104:34865): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342025.168:34866): pid=350485 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342025.168:34867): pid=350485 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342025.168:34868): pid=350485 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342025.175:34869): pid=350485 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342025.200:34870): pid=350485 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342025.200:34871): pid=350485 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.204:34872): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350473 suid=0 rport=35160 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.204:34873): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342025.208:34874): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342025.208:34875): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342025.209:34876): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342025.209:34877): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.209:34878): pid=350426 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.230:34879): pid=350527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342025.232:34880): pid=350524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350527 suid=74 rport=35170 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342025.232:34881): pid=350524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350527 suid=74 rport=35170 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342025.319:34882): pid=350524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342025.319:34883): pid=350524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342025.330:34884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342025.338:34885): pid=350524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342025.340:34886): pid=350524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350527 suid=74 rport=35170 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342025.342:34887): pid=350524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342025.342:34888): pid=350524 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=269 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342025.342:34888): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffff6afa990 a2=1 a3=0 items=0 ppid=39353 pid=350524 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=269 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342025.342:34888): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342025.343:34889): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342025.371:34890): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.372:34891): pid=350569 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342025.373:34892): pid=350569 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342025.396:34893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342025.415:34894): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342025.415:34895): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.416:34896): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342025.469:34897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342025.470:34898): pid=350572 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342025.470:34899): pid=350572 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342025.471:34900): pid=350572 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342025.473:34901): pid=350572 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342025.533:34902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342025.613:34903): prog-id=1495 op=LOAD type=SYSCALL msg=audit(1781342025.613:34903): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff2fd77120 a2=90 a3=9500000000 items=0 ppid=350607 pid=350608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342025.613:34903): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633365633739323531333062633737323766356437646162613431363336 type=SERVICE_START msg=audit(1781342025.684:34904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342025.699:34905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342025.702:34906): pid=350572 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342025.702:34907): pid=350572 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.706:34908): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350569 suid=0 rport=35170 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.707:34909): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342025.710:34910): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342025.710:34911): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342025.710:34912): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342025.710:34913): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342025.710:34914): pid=350524 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342025.730:34915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342025.956:34916): pid=349907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=349943 suid=74 rport=54326 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342025.957:34917): pid=349907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349943 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342025.958:34918): pid=349907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=349907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342025.958:34919): pid=349907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342026.093:34920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342026.352:34921): pid=350643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342026.360:34922): pid=350639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=350643 suid=74 rport=43108 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342026.361:34923): pid=350639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=350643 suid=74 rport=43108 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342026.798:34924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342026.977:34925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342026.977:34926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342027.131:34927): prog-id=1496 op=LOAD type=SYSCALL msg=audit(1781342027.131:34927): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd7990c010 a2=90 a3=9500000000 items=0 ppid=350686 pid=350687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342027.131:34927): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342027.202:34928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342027.212:34929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342027.321:34930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342027.550:34931): pid=350717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342027.551:34932): pid=350716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350717 suid=74 rport=35172 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342027.551:34933): pid=350716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350717 suid=74 rport=35172 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342027.623:34934): pid=350716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342027.623:34935): pid=350716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342027.645:34936): pid=350716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342027.645:34937): pid=350716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350717 suid=74 rport=35172 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342027.647:34938): pid=350716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342027.647:34939): pid=350716 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=270 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342027.647:34939): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffefa79fee0 a2=1 a3=0 items=0 ppid=39353 pid=350716 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=270 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342027.647:34939): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342027.648:34940): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342027.660:34941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342027.674:34942): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342027.675:34943): pid=350725 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342027.677:34944): pid=350725 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342027.721:34945): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342027.721:34946): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342027.724:34947): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342027.803:34948): pid=350731 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342027.804:34949): pid=350731 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342027.806:34950): pid=350731 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342027.811:34951): pid=350731 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342027.829:34952): pid=350731 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342027.829:34953): pid=350731 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342027.832:34954): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350725 suid=0 rport=35172 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342027.833:34955): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342027.835:34956): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342027.835:34957): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342027.836:34958): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342027.836:34959): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342027.836:34960): pid=350716 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342027.978:34961): pid=350639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="odoo18" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342027.979:34962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342028.448:34963): pid=350763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342028.450:34964): pid=350762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350763 suid=74 rport=35182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342028.450:34965): pid=350762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350763 suid=74 rport=35182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342028.528:34966): pid=350762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342028.528:34967): pid=350762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342028.558:34968): pid=350762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342028.558:34969): pid=350762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350763 suid=74 rport=35182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342028.561:34970): pid=350762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342028.561:34971): pid=350762 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=271 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342028.561:34971): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd273a320 a2=1 a3=0 items=0 ppid=39353 pid=350762 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=271 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342028.561:34971): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342028.563:34972): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342028.598:34973): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342028.599:34974): pid=350765 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342028.601:34975): pid=350765 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342028.643:34976): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342028.643:34977): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342028.645:34978): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342028.709:34979): pid=350766 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342028.710:34980): pid=350766 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342028.711:34981): pid=350766 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342028.715:34982): pid=350766 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342028.728:34983): pid=350766 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342028.728:34984): pid=350766 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342028.731:34985): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350765 suid=0 rport=35182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342028.731:34986): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342028.734:34987): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342028.734:34988): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342028.735:34989): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342028.735:34990): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342028.735:34991): pid=350762 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342029.296:34992): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1781342029.336:34993): pid=350782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350782 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342029.337:34994): pid=350781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350782 suid=74 rport=35188 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342029.337:34995): pid=350781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350782 suid=74 rport=35188 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342029.416:34996): pid=350781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342029.416:34997): pid=350781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342029.437:34998): pid=350781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342029.438:34999): pid=350781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350782 suid=74 rport=35188 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342029.440:35000): pid=350781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342029.440:35001): pid=350781 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=272 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342029.440:35001): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd5318580 a2=1 a3=0 items=0 ppid=39353 pid=350781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=272 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342029.440:35001): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342029.442:35002): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342029.472:35003): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342029.473:35004): pid=350784 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342029.474:35005): pid=350784 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342029.517:35006): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342029.517:35007): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342029.519:35008): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342029.583:35009): pid=350785 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342029.583:35010): pid=350785 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342029.583:35011): pid=350785 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342029.586:35012): pid=350785 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342029.598:35013): pid=350785 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342029.599:35014): pid=350785 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342029.601:35015): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350784 suid=0 rport=35188 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342029.601:35016): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342029.603:35017): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342029.603:35018): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342029.604:35019): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342029.604:35020): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342029.604:35021): pid=350781 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350781 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342029.678:35022): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342029.879:35023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342030.186:35024): pid=350829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342030.187:35025): pid=350828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350829 suid=74 rport=35202 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342030.187:35026): pid=350828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350829 suid=74 rport=35202 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342030.227:35027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342030.228:35028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342030.274:35029): pid=350828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342030.274:35030): pid=350828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342030.295:35031): pid=350828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342030.296:35032): pid=350828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350829 suid=74 rport=35202 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342030.299:35033): pid=350828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342030.299:35034): pid=350828 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=273 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342030.299:35034): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdb4853660 a2=1 a3=0 items=0 ppid=39353 pid=350828 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=273 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342030.299:35034): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342030.300:35035): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342030.339:35036): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342030.341:35037): pid=350847 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342030.342:35038): pid=350847 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342030.366:35039): prog-id=1497 op=LOAD type=SYSCALL msg=audit(1781342030.366:35039): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff12b9f440 a2=90 a3=9500000000 items=0 ppid=350845 pid=350846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342030.366:35039): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_LOGIN msg=audit(1781342030.385:35040): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342030.385:35041): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342030.389:35042): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342030.437:35043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342030.448:35044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342030.461:35045): pid=350849 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342030.462:35046): pid=350849 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342030.464:35047): pid=350849 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342030.468:35048): pid=350849 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342030.486:35049): pid=350849 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342030.486:35050): pid=350849 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342030.489:35051): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350847 suid=0 rport=35202 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342030.490:35052): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342030.493:35053): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342030.493:35054): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342030.494:35055): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342030.494:35056): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342030.494:35057): pid=350828 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342030.592:35058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342030.740:35059): pid=350639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350643 suid=74 rport=43108 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342030.741:35060): pid=350639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350643 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342030.742:35061): pid=350639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342030.742:35062): pid=350639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342031.168:35063): pid=350891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342031.170:35064): pid=350890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350891 suid=74 rport=35206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342031.170:35065): pid=350890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350891 suid=74 rport=35206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342031.285:35066): pid=350890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342031.285:35067): pid=350890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342031.313:35068): pid=350890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342031.314:35069): pid=350890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350891 suid=74 rport=35206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342031.316:35070): pid=350890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342031.316:35071): pid=350890 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=274 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342031.316:35071): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe86bd15d0 a2=1 a3=0 items=0 ppid=39353 pid=350890 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=274 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342031.316:35071): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342031.318:35072): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342031.349:35073): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342031.351:35074): pid=350893 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342031.352:35075): pid=350893 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342031.394:35076): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342031.394:35077): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342031.396:35078): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342031.464:35079): pid=350894 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342031.464:35080): pid=350894 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342031.465:35081): pid=350894 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342031.469:35082): pid=350894 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342031.484:35083): pid=350894 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342031.485:35084): pid=350894 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342031.488:35085): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350893 suid=0 rport=35206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342031.489:35086): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350893 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342031.491:35087): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342031.492:35088): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342031.493:35089): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342031.493:35090): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342031.493:35091): pid=350890 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.099:35092): pid=350910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342032.100:35093): pid=350909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350910 suid=74 rport=35216 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342032.100:35094): pid=350909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350910 suid=74 rport=35216 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342032.177:35095): pid=350909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342032.177:35096): pid=350909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342032.206:35097): pid=350909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342032.206:35098): pid=350909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350910 suid=74 rport=35216 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342032.209:35099): pid=350909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342032.209:35100): pid=350909 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=275 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342032.209:35100): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd837033b0 a2=1 a3=0 items=0 ppid=39353 pid=350909 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=275 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342032.209:35100): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342032.210:35101): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342032.227:35102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342032.243:35103): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.245:35104): pid=350918 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342032.247:35105): pid=350918 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342032.290:35106): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342032.290:35107): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.292:35108): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342032.355:35109): pid=350925 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342032.356:35110): pid=350925 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342032.356:35111): pid=350925 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342032.359:35112): pid=350925 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342032.361:35113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342032.377:35114): pid=350925 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342032.377:35115): pid=350925 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.381:35116): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350918 suid=0 rport=35216 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.381:35117): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342032.384:35118): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342032.384:35119): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342032.385:35120): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342032.385:35121): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.385:35122): pid=350909 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.411:35123): pid=350949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342032.412:35124): pid=350948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350949 suid=74 rport=35224 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342032.412:35125): pid=350948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=350949 suid=74 rport=35224 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342032.489:35126): pid=350948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342032.489:35127): pid=350948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342032.510:35128): pid=350948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342032.510:35129): pid=350948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350949 suid=74 rport=35224 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342032.513:35130): pid=350948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342032.513:35131): pid=350948 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=276 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342032.513:35131): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb4e4a1a0 a2=1 a3=0 items=0 ppid=39353 pid=350948 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=276 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342032.513:35131): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342032.514:35132): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342032.551:35133): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.552:35134): pid=350951 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342032.553:35135): pid=350951 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342032.596:35136): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342032.596:35137): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.598:35138): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342032.650:35139): pid=350952 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342032.650:35140): pid=350952 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342032.651:35141): pid=350952 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342032.653:35142): pid=350952 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342032.754:35143): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342032.824:35144): prog-id=1498 op=LOAD type=SYSCALL msg=audit(1781342032.824:35144): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcda337e20 a2=90 a3=9500000000 items=0 ppid=350994 pid=350995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342032.824:35144): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323761646130393339373662636133623539373066653039636639303862 type=SERVICE_START msg=audit(1781342032.885:35145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342032.897:35146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_central comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342032.899:35147): pid=350952 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342032.899:35148): pid=350952 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.903:35149): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350951 suid=0 rport=35224 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.903:35150): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342032.906:35151): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342032.906:35152): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342032.907:35153): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342032.907:35154): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342032.907:35155): pid=350948 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=350948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342032.957:35156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342033.014:35157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342033.226:35158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342033.227:35159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342033.348:35160): pid=351062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=BPF msg=audit(1781342033.359:35161): prog-id=1499 op=LOAD type=SYSCALL msg=audit(1781342033.359:35161): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc347dfdf0 a2=90 a3=9500000000 items=0 ppid=351059 pid=351060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342033.359:35161): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342033.427:35162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781342033.437:35163): pid=351045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=351062 suid=74 rport=53262 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342033.438:35164): pid=351045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=351062 suid=74 rport=53262 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342033.444:35165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342033.598:35166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342034.097:35167): pid=351045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342034.589:35168): pid=351099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342034.590:35169): pid=351098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351099 suid=74 rport=58790 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342034.590:35170): pid=351098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351099 suid=74 rport=58790 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342034.672:35171): pid=351098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342034.672:35172): pid=351098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342034.700:35173): pid=351098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342034.701:35174): pid=351098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351099 suid=74 rport=58790 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342034.703:35175): pid=351098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342034.703:35176): pid=351098 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=277 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342034.703:35176): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec09d7750 a2=1 a3=0 items=0 ppid=39353 pid=351098 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=277 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342034.703:35176): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342034.705:35177): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342034.721:35178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342034.735:35179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342034.742:35180): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342034.743:35181): pid=351108 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342034.745:35182): pid=351108 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342034.789:35183): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342034.789:35184): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342034.793:35185): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342034.864:35186): pid=351121 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342034.864:35187): pid=351121 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342034.865:35188): pid=351121 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342034.869:35189): pid=351121 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342034.885:35190): pid=351121 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342034.885:35191): pid=351121 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342034.889:35192): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351108 suid=0 rport=58790 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342034.889:35193): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342034.894:35194): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342034.894:35195): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342034.895:35196): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342034.895:35197): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342034.895:35198): pid=351098 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342034.903:35199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342034.984:35200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342035.516:35201): pid=351165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342035.517:35202): pid=351164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351165 suid=74 rport=58802 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342035.517:35203): pid=351164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351165 suid=74 rport=58802 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342035.607:35204): pid=351164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342035.607:35205): pid=351164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342035.637:35206): pid=351164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342035.637:35207): pid=351164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351165 suid=74 rport=58802 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342035.639:35208): pid=351164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342035.640:35209): pid=351164 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=278 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342035.640:35209): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe86039080 a2=1 a3=0 items=0 ppid=39353 pid=351164 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=278 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342035.640:35209): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342035.641:35210): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342035.666:35211): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342035.667:35212): pid=351167 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342035.667:35213): pid=351167 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342035.711:35214): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342035.711:35215): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342035.713:35216): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342035.777:35217): pid=351168 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342035.777:35218): pid=351168 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342035.778:35219): pid=351168 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342035.782:35220): pid=351168 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342035.799:35221): pid=351168 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342035.800:35222): pid=351168 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342035.804:35223): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351167 suid=0 rport=58802 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342035.804:35224): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342035.807:35225): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342035.807:35226): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342035.808:35227): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342035.808:35228): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342035.809:35229): pid=351164 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342035.862:35230): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342036.079:35231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342036.092:35232): pid=351045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351062 suid=74 rport=53262 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342036.092:35233): pid=351045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351062 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342036.094:35234): pid=351045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342036.094:35235): pid=351045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342036.245:35236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342036.249:35237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342036.249:35238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342036.249:35239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342036.392:35240): prog-id=1500 op=LOAD type=SYSCALL msg=audit(1781342036.392:35240): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffec6f07580 a2=90 a3=9500000000 items=0 ppid=351302 pid=351303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342036.392:35240): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342036.394:35241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342036.458:35242): pid=351332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342036.459:35243): pid=351328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351332 suid=74 rport=58818 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342036.460:35244): pid=351328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351332 suid=74 rport=58818 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342036.537:35245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342036.548:35246): pid=351328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342036.548:35247): pid=351328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342036.552:35248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342036.566:35249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342036.573:35250): pid=351328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342036.573:35251): pid=351328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351332 suid=74 rport=58818 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342036.575:35252): pid=351328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342036.575:35253): pid=351328 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=279 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342036.575:35253): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc23b369b0 a2=1 a3=0 items=0 ppid=39353 pid=351328 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=279 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342036.575:35253): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342036.576:35254): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342036.597:35255): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342036.598:35256): pid=351381 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351381 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342036.600:35257): pid=351381 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342036.612:35258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342036.623:35259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342036.643:35260): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342036.643:35261): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342036.645:35262): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342036.697:35263): pid=351387 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342036.697:35264): pid=351387 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342036.698:35265): pid=351387 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342036.704:35266): pid=351387 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342036.716:35267): pid=351387 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342036.717:35268): pid=351387 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342036.721:35269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342036.722:35270): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351381 suid=0 rport=58818 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342036.722:35271): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351381 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342036.724:35272): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342036.725:35273): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342036.725:35274): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342036.725:35275): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342036.725:35276): pid=351328 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342036.757:35277): pid=351411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342036.758:35278): pid=351410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351411 suid=74 rport=58834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342036.758:35279): pid=351410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351411 suid=74 rport=58834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342036.835:35280): pid=351410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342036.835:35281): pid=351410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342036.865:35282): pid=351410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342036.865:35283): pid=351410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351411 suid=74 rport=58834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342036.868:35284): pid=351410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342036.868:35285): pid=351410 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=280 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342036.868:35285): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc3e732f60 a2=1 a3=0 items=0 ppid=39353 pid=351410 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=280 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342036.868:35285): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342036.869:35286): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342036.909:35287): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342036.910:35288): pid=351413 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342036.910:35289): pid=351413 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342036.954:35290): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342036.954:35291): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342036.955:35292): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342037.019:35293): pid=351414 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342037.019:35294): pid=351414 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342037.020:35295): pid=351414 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342037.024:35296): pid=351414 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342037.172:35297): prog-id=1501 op=LOAD type=SYSCALL msg=audit(1781342037.172:35297): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe3ad7e490 a2=90 a3=9500000000 items=0 ppid=351442 pid=351443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342037.172:35297): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663636656635343666323765376637316665313664326366663562346134 type=SERVICE_START msg=audit(1781342037.254:35298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342037.267:35299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_notification comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342037.271:35300): pid=351414 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342037.271:35301): pid=351414 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342037.275:35302): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351413 suid=0 rport=58834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342037.275:35303): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342037.279:35304): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342037.279:35305): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342037.280:35306): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342037.280:35307): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342037.280:35308): pid=351410 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342037.419:35309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342037.740:35310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342038.033:35311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342038.904:35312): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781342038.905:35313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342039.004:35314): pid=351529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342039.006:35315): pid=351527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351529 suid=74 rport=58848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342039.006:35316): pid=351527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351529 suid=74 rport=58848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342039.087:35317): pid=351527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342039.087:35318): pid=351527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342039.116:35319): pid=351527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342039.118:35320): pid=351527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351529 suid=74 rport=58848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342039.120:35321): pid=351527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342039.121:35322): pid=351527 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=281 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342039.121:35322): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff70a6cb50 a2=1 a3=0 items=0 ppid=39353 pid=351527 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=281 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342039.121:35322): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342039.122:35323): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342039.156:35324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342039.158:35325): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.159:35326): pid=351557 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342039.161:35327): pid=351557 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342039.204:35328): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342039.205:35329): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.207:35330): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342039.219:35331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342039.275:35332): pid=351558 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342039.276:35333): pid=351558 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342039.277:35334): pid=351558 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342039.282:35335): pid=351558 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342039.297:35336): pid=351558 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342039.298:35337): pid=351558 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.300:35338): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351557 suid=0 rport=58848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.300:35339): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342039.302:35340): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342039.302:35341): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342039.303:35342): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342039.303:35343): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.303:35344): pid=351527 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.329:35345): pid=351574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342039.330:35346): pid=351573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351574 suid=74 rport=58854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342039.330:35347): pid=351573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351574 suid=74 rport=58854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342039.409:35348): pid=351573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342039.409:35349): pid=351573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342039.427:35350): pid=351573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342039.427:35351): pid=351573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351574 suid=74 rport=58854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342039.429:35352): pid=351573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342039.429:35353): pid=351573 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=282 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342039.429:35353): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc6b5ce10 a2=1 a3=0 items=0 ppid=39353 pid=351573 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=282 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342039.429:35353): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342039.430:35354): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342039.433:35355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342039.433:35356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342039.461:35357): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.462:35358): pid=351584 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342039.465:35359): pid=351584 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342039.509:35360): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342039.509:35361): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.512:35362): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342039.558:35363): pid=351591 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342039.558:35364): pid=351591 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342039.560:35365): pid=351591 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342039.561:35366): pid=351591 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342039.590:35367): prog-id=1502 op=LOAD type=SYSCALL msg=audit(1781342039.590:35367): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcd751f910 a2=90 a3=9500000000 items=0 ppid=351607 pid=351608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342039.590:35367): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342039.667:35368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342039.679:35369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342039.696:35370): prog-id=1503 op=LOAD type=SYSCALL msg=audit(1781342039.696:35370): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff5c928410 a2=90 a3=9500000000 items=0 ppid=351633 pid=351634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342039.696:35370): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346461326336393639313764336537346331326433643163653434633435 type=SERVICE_START msg=audit(1781342039.726:35371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_north_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342039.729:35372): pid=351591 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342039.729:35373): pid=351591 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.733:35374): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351584 suid=0 rport=58854 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.734:35375): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342039.736:35376): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342039.736:35377): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342039.736:35378): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342039.736:35379): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342039.736:35380): pid=351573 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342039.786:35381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342039.844:35382): pid=351695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342039.845:35383): pid=351631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=351695 suid=74 rport=53316 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342039.845:35384): pid=351631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=351695 suid=74 rport=53316 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342040.966:35385): pid=351631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342041.343:35386): pid=351767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342041.344:35387): pid=351766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351767 suid=74 rport=58860 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342041.344:35388): pid=351766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351767 suid=74 rport=58860 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342041.425:35389): pid=351766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342041.425:35390): pid=351766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342041.448:35391): pid=351766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342041.449:35392): pid=351766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351767 suid=74 rport=58860 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342041.451:35393): pid=351766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342041.451:35394): pid=351766 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=283 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342041.451:35394): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6aaa51c0 a2=1 a3=0 items=0 ppid=39353 pid=351766 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=283 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342041.451:35394): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342041.452:35395): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342041.478:35396): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.479:35397): pid=351769 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342041.480:35398): pid=351769 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342041.522:35399): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342041.522:35400): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.523:35401): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342041.581:35402): pid=351770 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342041.581:35403): pid=351770 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342041.581:35404): pid=351770 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342041.584:35405): pid=351770 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342041.603:35406): pid=351770 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342041.604:35407): pid=351770 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.607:35408): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351769 suid=0 rport=58860 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.608:35409): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342041.610:35410): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342041.611:35411): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342041.611:35412): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342041.612:35413): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.612:35414): pid=351766 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.631:35415): pid=351786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342041.632:35416): pid=351785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351786 suid=74 rport=58870 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342041.632:35417): pid=351785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=351786 suid=74 rport=58870 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342041.709:35418): pid=351785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342041.709:35419): pid=351785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342041.737:35420): pid=351785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342041.737:35421): pid=351785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351786 suid=74 rport=58870 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342041.739:35422): pid=351785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342041.740:35423): pid=351785 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=284 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342041.740:35423): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda57d91e0 a2=1 a3=0 items=0 ppid=39353 pid=351785 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=284 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342041.740:35423): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342041.741:35424): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342041.767:35425): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.768:35426): pid=351788 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342041.770:35427): pid=351788 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342041.813:35428): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342041.813:35429): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342041.815:35430): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342041.878:35431): pid=351789 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342041.879:35432): pid=351789 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342041.880:35433): pid=351789 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342041.883:35434): pid=351789 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342041.956:35435): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342042.088:35436): prog-id=1504 op=LOAD type=SYSCALL msg=audit(1781342042.088:35436): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5286dbf0 a2=90 a3=9500000000 items=0 ppid=351834 pid=351835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342042.088:35436): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613966663566633762373435396635646138383435343766373663643234 type=SERVICE_START msg=audit(1781342042.122:35437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_south_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342042.125:35438): pid=351789 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342042.125:35439): pid=351789 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342042.129:35440): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351788 suid=0 rport=58870 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342042.129:35441): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342042.133:35442): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342042.133:35443): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342042.133:35444): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342042.133:35445): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342042.133:35446): pid=351785 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342042.161:35447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342042.477:35448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342042.477:35449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342042.608:35450): prog-id=1505 op=LOAD type=SYSCALL msg=audit(1781342042.608:35450): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc6f153810 a2=90 a3=9500000000 items=0 ppid=351969 pid=351970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342042.608:35450): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342042.647:35451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342042.705:35452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342042.792:35453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342042.818:35454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342042.872:35455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342043.631:35456): pid=352016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342043.633:35457): pid=352015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352016 suid=74 rport=53166 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342043.633:35458): pid=352015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352016 suid=74 rport=53166 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342043.715:35459): pid=352015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342043.715:35460): pid=352015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342043.744:35461): pid=352015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342043.745:35462): pid=352015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352016 suid=74 rport=53166 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342043.747:35463): pid=352015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342043.747:35464): pid=352015 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=285 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342043.747:35464): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec2ed9900 a2=1 a3=0 items=0 ppid=39353 pid=352015 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=285 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342043.747:35464): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342043.749:35465): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342043.785:35466): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342043.787:35467): pid=352018 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342043.788:35468): pid=352018 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342043.830:35469): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342043.831:35470): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342043.833:35471): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342043.902:35472): pid=352019 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342043.902:35473): pid=352019 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342043.904:35474): pid=352019 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342043.908:35475): pid=352019 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342043.923:35476): pid=352019 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342043.924:35477): pid=352019 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342043.927:35478): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352018 suid=0 rport=53166 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342043.928:35479): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342043.931:35480): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342043.932:35481): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342043.932:35482): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342043.933:35483): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342043.933:35484): pid=352015 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342043.955:35485): pid=352035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342043.956:35486): pid=352034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352035 suid=74 rport=53182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342043.956:35487): pid=352034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352035 suid=74 rport=53182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342044.039:35488): pid=352034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342044.039:35489): pid=352034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342044.068:35490): pid=352034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342044.068:35491): pid=352034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352035 suid=74 rport=53182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342044.070:35492): pid=352034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342044.070:35493): pid=352034 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=286 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342044.070:35493): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffaceb3e80 a2=1 a3=0 items=0 ppid=39353 pid=352034 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=286 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342044.070:35493): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342044.071:35494): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342044.100:35495): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342044.102:35496): pid=352037 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342044.103:35497): pid=352037 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342044.145:35498): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342044.145:35499): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342044.147:35500): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342044.169:35501): pid=351631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=351695 suid=74 rport=53316 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342044.170:35502): pid=351631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351695 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342044.172:35503): pid=351631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=351631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342044.172:35504): pid=351631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342044.202:35505): pid=352038 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342044.203:35506): pid=352038 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342044.204:35507): pid=352038 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342044.207:35508): pid=352038 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342044.382:35509): prog-id=1506 op=LOAD type=SYSCALL msg=audit(1781342044.382:35509): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff90f7a010 a2=90 a3=9500000000 items=0 ppid=352068 pid=352069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342044.382:35509): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343865303163626230656330626463396563626130376334393563356564 type=SERVICE_START msg=audit(1781342044.447:35510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342044.465:35511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_northd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342044.468:35512): pid=352038 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342044.468:35513): pid=352038 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342044.472:35514): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352037 suid=0 rport=53182 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342044.473:35515): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342044.475:35516): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342044.476:35517): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342044.477:35518): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342044.477:35519): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342044.477:35520): pid=352034 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342044.545:35521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342044.986:35522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342045.072:35523): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342045.100:35524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342045.296:35525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342045.308:35526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342045.476:35527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342045.476:35528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342045.597:35529): prog-id=1507 op=LOAD type=SYSCALL msg=audit(1781342045.597:35529): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffcc611da0 a2=90 a3=9500000000 items=0 ppid=352191 pid=352192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342045.597:35529): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342045.647:35530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342045.670:35531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342045.771:35532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342046.142:35533): pid=352221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342046.143:35534): pid=352220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352221 suid=74 rport=53192 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342046.144:35535): pid=352220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352221 suid=74 rport=53192 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342046.222:35536): pid=352220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342046.222:35537): pid=352220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342046.252:35538): pid=352220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342046.252:35539): pid=352220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352221 suid=74 rport=53192 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342046.254:35540): pid=352220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342046.255:35541): pid=352220 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=287 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342046.255:35541): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff9df5fb10 a2=1 a3=0 items=0 ppid=39353 pid=352220 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=287 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342046.255:35541): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342046.257:35542): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342046.294:35543): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342046.296:35544): pid=352224 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342046.298:35545): pid=352224 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342046.341:35546): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342046.341:35547): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342046.343:35548): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342046.359:35549): pid=352232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342046.360:35550): pid=352222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=352232 suid=74 rport=37304 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342046.361:35551): pid=352222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=352232 suid=74 rport=37304 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1781342046.409:35552): pid=352225 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342046.410:35553): pid=352225 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342046.412:35554): pid=352225 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342046.416:35555): pid=352225 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342046.427:35556): pid=352225 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342046.428:35557): pid=352225 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342046.431:35558): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352224 suid=0 rport=53192 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342046.431:35559): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352224 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342046.434:35560): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342046.434:35561): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342046.435:35562): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342046.435:35563): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342046.435:35564): pid=352220 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342047.079:35565): pid=352242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342047.080:35566): pid=352241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352242 suid=74 rport=53206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342047.080:35567): pid=352241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352242 suid=74 rport=53206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342047.163:35568): pid=352241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342047.163:35569): pid=352241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342047.192:35570): pid=352241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342047.193:35571): pid=352241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352242 suid=74 rport=53206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342047.195:35572): pid=352241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342047.195:35573): pid=352241 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=288 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342047.195:35573): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffededf6a90 a2=1 a3=0 items=0 ppid=39353 pid=352241 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=288 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342047.195:35573): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342047.196:35574): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342047.222:35575): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342047.224:35576): pid=352244 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342047.225:35577): pid=352244 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342047.268:35578): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342047.268:35579): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342047.271:35580): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342047.281:35581): pid=352222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="rdpuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342047.321:35582): pid=352245 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342047.321:35583): pid=352245 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6865616C74685F6D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342047.324:35584): pid=352245 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342047.327:35585): pid=352245 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342047.338:35586): pid=352245 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342047.339:35587): pid=352245 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342047.341:35588): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352244 suid=0 rport=53206 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342047.341:35589): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342047.342:35590): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342047.343:35591): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342047.343:35592): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342047.343:35593): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342047.343:35594): pid=352241 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342047.951:35595): pid=352261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342047.953:35596): pid=352260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352261 suid=74 rport=53222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342047.953:35597): pid=352260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352261 suid=74 rport=53222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342047.988:35598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342047.992:35599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342048.037:35600): pid=352260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342048.037:35601): pid=352260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342048.056:35602): pid=352260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342048.057:35603): pid=352260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352261 suid=74 rport=53222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342048.059:35604): pid=352260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342048.059:35605): pid=352260 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=289 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342048.059:35605): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc48a2810 a2=1 a3=0 items=0 ppid=39353 pid=352260 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=289 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342048.059:35605): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342048.061:35606): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342048.113:35607): prog-id=0 op=UNLOAD type=USER_START msg=audit(1781342048.123:35608): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342048.124:35609): pid=352311 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342048.126:35610): pid=352311 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342048.144:35611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342048.170:35612): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342048.170:35613): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342048.173:35614): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342048.215:35615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342048.222:35616): pid=352313 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342048.223:35617): pid=352313 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F727379736C6F672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342048.224:35618): pid=352313 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342048.228:35619): pid=352313 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342048.239:35620): pid=352313 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342048.239:35621): pid=352313 uid=0 auid=0 ses=289 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342048.242:35622): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352311 suid=0 rport=53222 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342048.242:35623): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342048.245:35624): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342048.245:35625): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342048.245:35626): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342048.246:35627): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342048.246:35628): pid=352260 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342048.383:35629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342048.727:35630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342048.727:35631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342048.861:35632): prog-id=1508 op=LOAD type=SYSCALL msg=audit(1781342048.861:35632): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff9a744900 a2=90 a3=9500000000 items=0 ppid=352359 pid=352360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342048.861:35632): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=CRYPTO_KEY_USER msg=audit(1781342048.863:35633): pid=352363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342048.864:35634): pid=352361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352363 suid=74 rport=53232 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342048.864:35635): pid=352361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352363 suid=74 rport=53232 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342048.932:35636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342048.945:35637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342048.946:35638): pid=352361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342048.946:35639): pid=352361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342048.976:35640): pid=352361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342048.977:35641): pid=352361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352363 suid=74 rport=53232 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342048.979:35642): pid=352361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342048.980:35643): pid=352361 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=290 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342048.980:35643): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff8615f190 a2=1 a3=0 items=0 ppid=39353 pid=352361 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=290 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342048.980:35643): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342048.981:35644): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342049.014:35645): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.016:35646): pid=352382 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342049.017:35647): pid=352382 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342049.061:35648): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342049.061:35649): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.066:35650): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342049.119:35651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342049.143:35652): pid=352391 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342049.144:35653): pid=352391 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6472697665725F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342049.146:35654): pid=352391 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342049.151:35655): pid=352391 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342049.163:35656): pid=352391 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342049.163:35657): pid=352391 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.166:35658): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352382 suid=0 rport=53232 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.166:35659): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342049.168:35660): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342049.169:35661): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342049.169:35662): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342049.169:35663): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.169:35664): pid=352361 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.811:35665): pid=352407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342049.812:35666): pid=352406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352407 suid=74 rport=53238 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342049.812:35667): pid=352406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352407 suid=74 rport=53238 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342049.886:35668): pid=352406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342049.886:35669): pid=352406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342049.915:35670): pid=352406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342049.915:35671): pid=352406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352407 suid=74 rport=53238 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342049.917:35672): pid=352406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342049.917:35673): pid=352406 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=291 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342049.917:35673): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe92e563e0 a2=1 a3=0 items=0 ppid=39353 pid=352406 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=291 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342049.917:35673): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342049.918:35674): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.940:35675): pid=352222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352232 suid=74 rport=37304 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342049.940:35676): pid=352222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352232 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342049.941:35677): pid=352222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342049.941:35678): pid=352222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781342049.944:35679): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.946:35680): pid=352409 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342049.947:35681): pid=352409 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342049.990:35682): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342049.990:35683): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342049.991:35684): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342050.054:35685): pid=352410 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342050.055:35686): pid=352410 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F686F7573656B656570696E672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342050.055:35687): pid=352410 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342050.059:35688): pid=352410 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342050.078:35689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342050.085:35690): pid=352410 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342050.085:35691): pid=352410 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342050.088:35692): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352409 suid=0 rport=53238 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342050.088:35693): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342050.092:35694): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342050.092:35695): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342050.093:35696): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342050.093:35697): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342050.093:35698): pid=352406 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342050.694:35699): pid=352458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342050.695:35700): pid=352457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352458 suid=74 rport=53248 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342050.695:35701): pid=352457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352458 suid=74 rport=53248 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342050.771:35702): pid=352457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342050.771:35703): pid=352457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342050.792:35704): pid=352457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342050.793:35705): pid=352457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352458 suid=74 rport=53248 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342050.795:35706): pid=352457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342050.795:35707): pid=352457 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=292 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342050.795:35707): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe579dde10 a2=1 a3=0 items=0 ppid=39353 pid=352457 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=292 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342050.795:35707): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342050.796:35708): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342050.819:35709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342050.823:35710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342050.826:35711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342050.831:35712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342050.834:35713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342050.870:35714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342050.882:35715): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342050.883:35716): pid=352510 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342050.884:35717): pid=352510 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342050.927:35718): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342050.927:35719): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342050.928:35720): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342050.947:35721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342050.989:35722): pid=352519 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342050.990:35723): pid=352519 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342050.992:35724): pid=352519 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342050.999:35725): pid=352519 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342051.011:35726): pid=352519 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342051.011:35727): pid=352519 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.042:35728): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352510 suid=0 rport=53248 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.043:35729): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342051.045:35730): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342051.045:35731): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342051.046:35732): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342051.046:35733): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.046:35734): pid=352457 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342051.052:35735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.059:35736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.141:35737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.144:35738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.146:35739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.195:35740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342051.210:35741): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342051.261:35742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.364:35743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.378:35744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.381:35745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.387:35746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.393:35747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.400:35748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.452:35749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.497:35750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.498:35751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.516:35752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.576:35753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342051.639:35754): pid=352816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352816 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1781342051.640:35755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781342051.640:35756): pid=352809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352816 suid=74 rport=53252 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342051.640:35757): pid=352809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352816 suid=74 rport=53252 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342051.641:35758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342051.641:35759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342051.726:35760): pid=352809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342051.726:35761): pid=352809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342051.757:35762): pid=352809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342051.758:35763): pid=352809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352816 suid=74 rport=53252 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342051.760:35764): pid=352809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342051.760:35765): pid=352809 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=293 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342051.760:35765): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd84901df0 a2=1 a3=0 items=0 ppid=39353 pid=352809 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=293 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342051.760:35765): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342051.761:35766): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342051.761:35767): prog-id=1509 op=LOAD type=SYSCALL msg=audit(1781342051.761:35767): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd7dc51300 a2=90 a3=9500000000 items=0 ppid=352839 pid=352840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342051.761:35767): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_START msg=audit(1781342051.800:35768): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.801:35769): pid=352845 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352845 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342051.802:35770): pid=352845 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342051.805:35771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.835:35772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342051.843:35773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342051.846:35774): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342051.846:35775): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.849:35776): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342051.878:35777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342051.897:35778): pid=352858 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342051.897:35779): pid=352858 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342051.899:35780): pid=352858 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342051.902:35781): pid=352858 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342051.913:35782): pid=352858 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342051.914:35783): pid=352858 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.916:35784): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352845 suid=0 rport=53252 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.916:35785): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352845 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342051.919:35786): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342051.919:35787): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342051.920:35788): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342051.920:35789): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342051.920:35790): pid=352809 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352809 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342051.945:35791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342052.376:35792): pid=352889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342052.378:35793): pid=352888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=352889 suid=74 rport=37326 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342052.378:35794): pid=352888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=352889 suid=74 rport=37326 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342052.536:35795): pid=352891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342052.537:35796): pid=352890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352891 suid=74 rport=53256 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342052.537:35797): pid=352890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352891 suid=74 rport=53256 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342052.620:35798): pid=352890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342052.620:35799): pid=352890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342052.651:35800): pid=352890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342052.652:35801): pid=352890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352891 suid=74 rport=53256 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342052.655:35802): pid=352890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342052.655:35803): pid=352890 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=294 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342052.655:35803): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffebaed9d0 a2=1 a3=0 items=0 ppid=39353 pid=352890 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=294 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342052.655:35803): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342052.657:35804): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342052.681:35805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342052.697:35806): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342052.699:35807): pid=352899 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342052.700:35808): pid=352899 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342052.744:35809): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342052.744:35810): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342052.748:35811): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342052.825:35812): pid=352906 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342052.825:35813): pid=352906 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342052.826:35814): pid=352906 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342052.831:35815): pid=352906 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342052.844:35816): pid=352906 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342052.845:35817): pid=352906 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342052.847:35818): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352899 suid=0 rport=53256 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342052.847:35819): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342052.850:35820): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342052.850:35821): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342052.850:35822): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342052.850:35823): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342052.850:35824): pid=352890 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342053.525:35825): pid=352938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342053.526:35826): pid=352937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352938 suid=74 rport=39022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342053.527:35827): pid=352937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352938 suid=74 rport=39022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342053.612:35828): pid=352937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342053.612:35829): pid=352937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342053.642:35830): pid=352937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342053.643:35831): pid=352937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352938 suid=74 rport=39022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342053.645:35832): pid=352937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342053.645:35833): pid=352937 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=295 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342053.645:35833): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdecbbe780 a2=1 a3=0 items=0 ppid=39353 pid=352937 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=295 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342053.645:35833): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342053.647:35834): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342053.688:35835): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342053.690:35836): pid=352940 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342053.691:35837): pid=352940 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342053.734:35838): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342053.734:35839): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342053.736:35840): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342053.803:35841): pid=352941 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342053.803:35842): pid=352941 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342053.804:35843): pid=352941 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342053.808:35844): pid=352941 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342053.822:35845): pid=352941 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342053.823:35846): pid=352941 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342053.825:35847): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352940 suid=0 rport=39022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342053.826:35848): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352940 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342053.829:35849): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342053.829:35850): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342053.830:35851): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342053.830:35852): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342053.830:35853): pid=352937 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342054.211:35854): prog-id=0 op=UNLOAD type=USER_AUTH msg=audit(1781342054.328:35855): pid=352888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="labuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342054.443:35856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342054.453:35857): pid=352982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342054.454:35858): pid=352980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352982 suid=74 rport=39030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342054.454:35859): pid=352980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=352982 suid=74 rport=39030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342054.532:35860): pid=352980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342054.532:35861): pid=352980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342054.561:35862): pid=352980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342054.562:35863): pid=352980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352982 suid=74 rport=39030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342054.564:35864): pid=352980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342054.564:35865): pid=352980 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=296 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342054.564:35865): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffe7eb5070 a2=1 a3=0 items=0 ppid=39353 pid=352980 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=296 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342054.564:35865): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342054.566:35866): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342054.571:35867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342054.571:35868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342054.598:35869): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342054.600:35870): pid=352990 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342054.601:35871): pid=352990 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342054.645:35872): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342054.645:35873): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342054.648:35874): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342054.716:35875): prog-id=1510 op=LOAD type=SYSCALL msg=audit(1781342054.716:35875): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd1acf3b00 a2=90 a3=9500000000 items=0 ppid=353012 pid=353013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342054.716:35875): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_ACCT msg=audit(1781342054.718:35876): pid=352996 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342054.718:35877): pid=352996 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342054.719:35878): pid=352996 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342054.722:35879): pid=352996 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342054.736:35880): pid=352996 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342054.737:35881): pid=352996 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342054.746:35882): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352990 suid=0 rport=39030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342054.746:35883): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342054.750:35884): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342054.751:35885): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342054.751:35886): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342054.752:35887): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342054.752:35888): pid=352980 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342054.780:35889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342054.796:35890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342054.911:35891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342055.392:35892): pid=353044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353044 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342055.393:35893): pid=353042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353044 suid=74 rport=39034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342055.393:35894): pid=353042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353044 suid=74 rport=39034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342055.408:35895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342055.412:35896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342055.434:35897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342055.466:35898): pid=353042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342055.466:35899): pid=353042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342055.492:35900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342055.498:35901): pid=353042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342055.499:35902): pid=353042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353044 suid=74 rport=39034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342055.501:35903): pid=353042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342055.501:35904): pid=353042 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=297 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342055.501:35904): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe47e65260 a2=1 a3=0 items=0 ppid=39353 pid=353042 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=297 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342055.501:35904): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342055.502:35905): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342055.536:35906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342055.542:35907): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342055.544:35908): pid=353086 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342055.546:35909): pid=353086 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342055.595:35910): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342055.596:35911): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342055.597:35912): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353109 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342055.639:35913): pid=353109 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342055.639:35914): pid=353109 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342055.642:35915): pid=353109 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342055.646:35916): pid=353109 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342055.658:35917): pid=353109 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342055.658:35918): pid=353109 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342055.661:35919): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353086 suid=0 rport=39034 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342055.661:35920): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342055.664:35921): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342055.664:35922): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342055.664:35923): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342055.664:35924): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342055.664:35925): pid=353042 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342055.740:35926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342055.741:35927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342055.789:35928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342055.910:35929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342055.957:35930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342056.230:35931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342056.258:35932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342056.378:35933): pid=353270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342056.380:35934): pid=353264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353270 suid=74 rport=39046 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342056.380:35935): pid=353264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353270 suid=74 rport=39046 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342056.459:35936): pid=353264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342056.459:35937): pid=353264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342056.478:35938): pid=353264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342056.478:35939): pid=353264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353270 suid=74 rport=39046 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342056.480:35940): pid=353264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342056.480:35941): pid=353264 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=298 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342056.480:35941): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff866efe30 a2=1 a3=0 items=0 ppid=39353 pid=353264 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=298 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342056.480:35941): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342056.482:35942): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342056.510:35943): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342056.511:35944): pid=353279 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342056.512:35945): pid=353279 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342056.556:35946): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342056.556:35947): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342056.558:35948): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342056.628:35949): pid=353280 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342056.628:35950): pid=353280 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342056.629:35951): pid=353280 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342056.633:35952): pid=353280 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342056.651:35953): pid=353280 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342056.651:35954): pid=353280 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342056.657:35955): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353279 suid=0 rport=39046 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342056.657:35956): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342056.659:35957): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342056.660:35958): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342056.661:35959): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342056.661:35960): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342056.661:35961): pid=353264 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342056.749:35962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342057.310:35963): pid=353299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342057.311:35964): pid=353298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353299 suid=74 rport=39054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342057.312:35965): pid=353298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353299 suid=74 rport=39054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342057.390:35966): pid=353298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342057.390:35967): pid=353298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342057.420:35968): pid=353298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342057.420:35969): pid=353298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353299 suid=74 rport=39054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342057.423:35970): pid=353298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342057.424:35971): pid=353298 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=299 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342057.424:35971): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffadfc6470 a2=1 a3=0 items=0 ppid=39353 pid=353298 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=299 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342057.424:35971): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342057.426:35972): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342057.450:35973): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342057.451:35974): pid=353301 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342057.453:35975): pid=353301 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342057.483:35976): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1781342057.496:35977): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342057.496:35978): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342057.498:35979): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342057.581:35980): pid=353309 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342057.581:35981): pid=353309 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342057.583:35982): pid=353309 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342057.589:35983): pid=353309 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342057.615:35984): pid=353309 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342057.615:35985): pid=353309 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342057.618:35986): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353301 suid=0 rport=39054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342057.618:35987): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342057.622:35988): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342057.622:35989): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342057.623:35990): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342057.623:35991): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342057.623:35992): pid=353298 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342057.731:35993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342057.834:35994): pid=352888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=352889 suid=74 rport=37326 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342057.834:35995): pid=352888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352889 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342057.836:35996): pid=352888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=352888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342057.836:35997): pid=352888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342057.839:35998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342057.839:35999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342057.964:36000): prog-id=1511 op=LOAD type=SYSCALL msg=audit(1781342057.964:36000): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc4ebabc00 a2=90 a3=9500000000 items=0 ppid=353358 pid=353359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342057.964:36000): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342057.983:36001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342058.015:36002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342058.026:36003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342058.184:36004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342058.246:36005): pid=353410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342058.247:36006): pid=353407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353410 suid=74 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342058.247:36007): pid=353407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353410 suid=74 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342058.259:36008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342058.324:36009): pid=353407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342058.324:36010): pid=353407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342058.342:36011): pid=353407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342058.342:36012): pid=353407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353410 suid=74 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342058.344:36013): pid=353407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342058.344:36014): pid=353407 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=300 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342058.344:36014): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdcb6f4e40 a2=1 a3=0 items=0 ppid=39353 pid=353407 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=300 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342058.344:36014): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342058.345:36015): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342058.372:36016): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342058.373:36017): pid=353413 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342058.374:36018): pid=353413 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342058.418:36019): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342058.418:36020): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342058.420:36021): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342058.479:36022): pid=353414 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342058.480:36023): pid=353414 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F756E626F756E642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342058.481:36024): pid=353414 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342058.483:36025): pid=353414 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342058.496:36026): pid=353414 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342058.497:36027): pid=353414 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342058.499:36028): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353413 suid=0 rport=39064 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342058.499:36029): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342058.502:36030): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342058.502:36031): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342058.503:36032): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342058.503:36033): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342058.503:36034): pid=353407 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.116:36035): pid=353432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342059.117:36036): pid=353431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353432 suid=74 rport=39080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342059.117:36037): pid=353431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353432 suid=74 rport=39080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342059.191:36038): pid=353431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342059.191:36039): pid=353431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342059.209:36040): pid=353431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342059.209:36041): pid=353431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353432 suid=74 rport=39080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342059.211:36042): pid=353431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342059.211:36043): pid=353431 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=301 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342059.211:36043): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd977303e0 a2=1 a3=0 items=0 ppid=39353 pid=353431 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=301 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342059.211:36043): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342059.212:36044): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342059.248:36045): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.250:36046): pid=353435 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342059.251:36047): pid=353435 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342059.293:36048): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342059.293:36049): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.294:36050): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342059.341:36051): pid=353436 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342059.341:36052): pid=353436 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342059.342:36053): pid=353436 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342059.344:36054): pid=353436 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342059.359:36055): pid=353436 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342059.360:36056): pid=353436 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.362:36057): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353435 suid=0 rport=39080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.363:36058): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342059.365:36059): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342059.365:36060): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342059.366:36061): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342059.366:36062): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.366:36063): pid=353431 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.389:36064): pid=353452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342059.390:36065): pid=353451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353452 suid=74 rport=39086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342059.390:36066): pid=353451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353452 suid=74 rport=39086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342059.396:36067): pid=353453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342059.397:36068): pid=353433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=353453 suid=74 rport=40630 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342059.397:36069): pid=353433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=353453 suid=74 rport=40630 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342059.466:36070): pid=353451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342059.466:36071): pid=353451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342059.495:36072): pid=353451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342059.496:36073): pid=353451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353452 suid=74 rport=39086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342059.498:36074): pid=353451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342059.498:36075): pid=353451 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=302 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342059.498:36075): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb936b350 a2=1 a3=0 items=0 ppid=39353 pid=353451 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=302 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342059.498:36075): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342059.500:36076): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342059.534:36077): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.536:36078): pid=353455 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342059.537:36079): pid=353455 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342059.579:36080): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342059.579:36081): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.581:36082): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.630:36083): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353455 suid=0 rport=39086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.630:36084): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342059.633:36085): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342059.633:36086): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342059.634:36087): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342059.634:36088): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342059.634:36089): pid=353451 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342060.257:36090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342060.482:36091): prog-id=0 op=UNLOAD type=USER_AUTH msg=audit(1781342060.518:36092): pid=353433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gitlab-runner" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342060.724:36093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342060.768:36094): pid=353501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342060.769:36095): pid=353500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353501 suid=74 rport=39100 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342060.769:36096): pid=353500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353501 suid=74 rport=39100 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342060.842:36097): pid=353500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342060.842:36098): pid=353500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342060.867:36099): pid=353500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342060.867:36100): pid=353500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353501 suid=74 rport=39100 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342060.869:36101): pid=353500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342060.869:36102): pid=353500 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=303 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342060.869:36102): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe4b6b9f50 a2=1 a3=0 items=0 ppid=39353 pid=353500 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=303 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342060.869:36102): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342060.870:36103): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342060.874:36104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342060.874:36105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342060.911:36106): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342060.912:36107): pid=353509 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342060.914:36108): pid=353509 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342060.958:36109): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342060.958:36110): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342060.962:36111): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342061.018:36112): prog-id=1512 op=LOAD type=SYSCALL msg=audit(1781342061.018:36112): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5570a540 a2=90 a3=9500000000 items=0 ppid=353529 pid=353530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342061.018:36112): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_ACCT msg=audit(1781342061.034:36113): pid=353515 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342061.034:36114): pid=353515 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342061.036:36115): pid=353515 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342061.043:36116): pid=353515 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342061.058:36117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781342061.065:36118): pid=353515 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342061.066:36119): pid=353515 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.072:36120): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353509 suid=0 rport=39100 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.072:36121): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342061.079:36122): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342061.080:36123): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342061.081:36124): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342061.081:36125): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.081:36126): pid=353500 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342061.097:36127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342061.100:36128): pid=353545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342061.102:36129): pid=353543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353545 suid=74 rport=39106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342061.102:36130): pid=353543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353545 suid=74 rport=39106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342061.112:36131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342061.185:36132): pid=353543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342061.185:36133): pid=353543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342061.204:36134): pid=353543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342061.205:36135): pid=353543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353545 suid=74 rport=39106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342061.207:36136): pid=353543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342061.207:36137): pid=353543 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=304 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342061.207:36137): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc26373a0 a2=1 a3=0 items=0 ppid=39353 pid=353543 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=304 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342061.207:36137): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342061.209:36138): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342061.231:36139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781342061.235:36140): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.236:36141): pid=353568 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342061.237:36142): pid=353568 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342061.281:36143): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342061.281:36144): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.286:36145): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.330:36146): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353568 suid=0 rport=39106 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.331:36147): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342061.334:36148): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342061.334:36149): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342061.335:36150): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342061.335:36151): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342061.335:36152): pid=353543 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342062.498:36153): pid=353590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353590 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342062.499:36154): pid=353589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353590 suid=74 rport=39116 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342062.500:36155): pid=353589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353590 suid=74 rport=39116 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342062.580:36156): pid=353589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342062.580:36157): pid=353589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342062.601:36158): pid=353589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342062.601:36159): pid=353589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353590 suid=74 rport=39116 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342062.604:36160): pid=353589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342062.604:36161): pid=353589 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=305 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342062.604:36161): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd0a2e35c0 a2=1 a3=0 items=0 ppid=39353 pid=353589 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=305 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342062.604:36161): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342062.605:36162): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342062.621:36163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342062.637:36164): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342062.638:36165): pid=353598 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342062.639:36166): pid=353598 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342062.683:36167): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342062.683:36168): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342062.685:36169): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342062.754:36170): pid=353605 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342062.755:36171): pid=353605 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342062.757:36172): pid=353605 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342062.762:36173): pid=353605 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342062.768:36174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342062.780:36175): pid=353605 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342062.780:36176): pid=353605 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342062.788:36177): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342062.788:36178): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342062.788:36179): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353598 suid=0 rport=39116 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342062.788:36180): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342062.792:36181): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342062.793:36182): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342062.793:36183): pid=353589 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342062.830:36184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342062.979:36185): pid=353433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353453 suid=74 rport=40630 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342062.980:36186): pid=353433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353453 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342062.980:36187): pid=353433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342062.981:36188): pid=353433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342063.394:36189): pid=353628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342063.395:36190): pid=353627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353628 suid=74 rport=38086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342063.396:36191): pid=353627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353628 suid=74 rport=38086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342063.422:36192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342063.424:36193): prog-id=0 op=UNLOAD type=USER_AUTH msg=audit(1781342063.482:36194): pid=353627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342063.482:36195): pid=353627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342063.502:36196): pid=353627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342063.503:36197): pid=353627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353628 suid=74 rport=38086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342063.505:36198): pid=353627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342063.506:36199): pid=353627 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=306 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342063.506:36199): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd6042e430 a2=1 a3=0 items=0 ppid=39353 pid=353627 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=306 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342063.506:36199): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342063.507:36200): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342063.576:36201): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342063.578:36202): pid=353656 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342063.579:36203): pid=353656 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342063.632:36204): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342063.632:36205): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342063.635:36206): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342063.703:36207): pid=353669 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342063.703:36208): pid=353669 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342063.704:36209): pid=353669 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342063.708:36210): pid=353669 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342063.709:36211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781342063.717:36212): pid=353669 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342063.718:36213): pid=353669 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342063.722:36214): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353656 suid=0 rport=38086 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342063.722:36215): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342063.724:36216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781342063.725:36217): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342063.725:36218): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342063.725:36219): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342063.725:36220): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342063.725:36221): pid=353627 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342063.977:36222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342063.977:36223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342064.120:36224): prog-id=1513 op=LOAD type=SYSCALL msg=audit(1781342064.120:36224): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffffc5dee50 a2=90 a3=9500000000 items=0 ppid=353710 pid=353711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342064.120:36224): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342064.201:36225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342064.214:36226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342064.352:36227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342064.383:36228): pid=353740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342064.384:36229): pid=353739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353740 suid=74 rport=38090 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342064.384:36230): pid=353739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353740 suid=74 rport=38090 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342064.467:36231): pid=353739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342064.467:36232): pid=353739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342064.496:36233): pid=353739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342064.496:36234): pid=353739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353740 suid=74 rport=38090 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342064.498:36235): pid=353739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342064.499:36236): pid=353739 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=307 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342064.499:36236): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc2bf0d9d0 a2=1 a3=0 items=0 ppid=39353 pid=353739 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=307 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342064.499:36236): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342064.500:36237): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342064.544:36238): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342064.546:36239): pid=353742 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342064.547:36240): pid=353742 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342064.591:36241): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342064.591:36242): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342064.593:36243): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342064.661:36244): pid=353743 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342064.661:36245): pid=353743 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6B657973746F6E655F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342064.663:36246): pid=353743 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342064.669:36247): pid=353743 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342064.684:36248): pid=353743 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342064.684:36249): pid=353743 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342064.687:36250): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353742 suid=0 rport=38090 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342064.688:36251): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342064.690:36252): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342064.691:36253): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342064.691:36254): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342064.691:36255): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342064.691:36256): pid=353739 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342064.989:36257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342064.995:36258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342065.154:36259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342065.242:36260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342065.330:36261): pid=353803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342065.332:36262): pid=353802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353803 suid=74 rport=38104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342065.332:36263): pid=353802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353803 suid=74 rport=38104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342065.422:36264): pid=353802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342065.423:36265): pid=353802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342065.445:36266): pid=353802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342065.445:36267): pid=353802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353803 suid=74 rport=38104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342065.448:36268): pid=353802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342065.449:36269): pid=353802 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=308 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342065.449:36269): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4aa09a00 a2=1 a3=0 items=0 ppid=39353 pid=353802 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=308 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342065.449:36269): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342065.451:36270): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342065.487:36271): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.489:36272): pid=353805 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342065.491:36273): pid=353805 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342065.535:36274): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342065.535:36275): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.538:36276): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342065.611:36277): pid=353806 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342065.611:36278): pid=353806 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342065.613:36279): pid=353806 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342065.617:36280): pid=353806 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342065.634:36281): pid=353806 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342065.634:36282): pid=353806 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.637:36283): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353805 suid=0 rport=38104 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.637:36284): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342065.640:36285): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342065.640:36286): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342065.641:36287): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342065.641:36288): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.642:36289): pid=353802 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.664:36290): pid=353822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342065.665:36291): pid=353821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353822 suid=74 rport=38112 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342065.665:36292): pid=353821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353822 suid=74 rport=38112 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342065.744:36293): pid=353821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342065.744:36294): pid=353821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342065.773:36295): pid=353821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342065.774:36296): pid=353821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353822 suid=74 rport=38112 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342065.776:36297): pid=353821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342065.776:36298): pid=353821 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=309 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342065.776:36298): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd727a10d0 a2=1 a3=0 items=0 ppid=39353 pid=353821 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=309 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342065.776:36298): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342065.778:36299): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342065.821:36300): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.822:36301): pid=353824 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342065.823:36302): pid=353824 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342065.865:36303): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342065.865:36304): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.866:36305): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.912:36306): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353824 suid=0 rport=38112 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.913:36307): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353824 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342065.915:36308): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342065.915:36309): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342065.916:36310): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342065.916:36311): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.916:36312): pid=353821 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342065.965:36313): pid=353839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342066.229:36314): pid=353838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=353839 suid=74 rport=54146 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342066.230:36315): pid=353838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=353839 suid=74 rport=54146 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342066.483:36316): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781342066.560:36317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342066.651:36318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342066.655:36319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342066.738:36320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342066.789:36321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342066.816:36322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342066.846:36323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342066.960:36324): pid=353838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342066.976:36325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342066.976:36326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342067.093:36327): prog-id=1514 op=LOAD type=SYSCALL msg=audit(1781342067.093:36327): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5825f3f0 a2=90 a3=9500000000 items=0 ppid=353963 pid=353964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342067.093:36327): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=CRYPTO_KEY_USER msg=audit(1781342067.117:36328): pid=353968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342067.118:36329): pid=353966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353968 suid=74 rport=38118 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342067.118:36330): pid=353966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=353968 suid=74 rport=38118 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342067.148:36331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342067.159:36332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342067.207:36333): pid=353966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342067.207:36334): pid=353966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342067.224:36335): pid=353966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342067.225:36336): pid=353966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353968 suid=74 rport=38118 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342067.227:36337): pid=353966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342067.227:36338): pid=353966 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=310 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342067.227:36338): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff3d0e4c80 a2=1 a3=0 items=0 ppid=39353 pid=353966 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=310 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342067.227:36338): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342067.229:36339): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342067.256:36340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781342067.261:36341): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.262:36342): pid=353998 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342067.263:36343): pid=353998 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342067.307:36344): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342067.307:36345): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.309:36346): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342067.349:36347): pid=353999 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342067.350:36348): pid=353999 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342067.350:36349): pid=353999 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342067.353:36350): pid=353999 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342067.366:36351): pid=353999 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342067.367:36352): pid=353999 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.369:36353): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353998 suid=0 rport=38118 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.369:36354): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342067.371:36355): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342067.372:36356): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342067.372:36357): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342067.372:36358): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.373:36359): pid=353966 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.397:36360): pid=354015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342067.398:36361): pid=354014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354015 suid=74 rport=38126 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342067.398:36362): pid=354014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354015 suid=74 rport=38126 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342067.478:36363): pid=354014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342067.478:36364): pid=354014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342067.485:36365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342067.496:36366): pid=354014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342067.496:36367): pid=354014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354015 suid=74 rport=38126 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342067.498:36368): pid=354014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342067.498:36369): pid=354014 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=311 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342067.498:36369): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe0ed6a5f0 a2=1 a3=0 items=0 ppid=39353 pid=354014 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=311 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342067.498:36369): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342067.500:36370): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342067.529:36371): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.530:36372): pid=354027 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342067.532:36373): pid=354027 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342067.576:36374): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342067.576:36375): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.579:36376): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342067.625:36377): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342067.625:36378): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.625:36379): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354027 suid=0 rport=38126 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.625:36380): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342067.628:36381): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342067.628:36382): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342067.629:36383): pid=354014 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342067.682:36384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342068.815:36385): pid=354056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342068.817:36386): pid=354055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354056 suid=74 rport=38136 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342068.818:36387): pid=354055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354056 suid=74 rport=38136 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342068.899:36388): pid=354055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342068.899:36389): pid=354055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342068.931:36390): pid=354055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342068.932:36391): pid=354055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354056 suid=74 rport=38136 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342068.933:36392): pid=354055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342068.933:36393): pid=354055 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=312 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342068.933:36393): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc4f4e330 a2=1 a3=0 items=0 ppid=39353 pid=354055 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=312 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342068.933:36393): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342068.935:36394): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342068.957:36395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342068.975:36396): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342068.977:36397): pid=354064 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342068.978:36398): pid=354064 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342069.022:36399): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342069.022:36400): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.024:36401): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342069.078:36402): pid=354072 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342069.078:36403): pid=354072 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342069.079:36404): pid=354072 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342069.083:36405): pid=354072 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342069.096:36406): pid=354072 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342069.097:36407): pid=354072 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.099:36408): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354064 suid=0 rport=38136 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.099:36409): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342069.102:36410): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342069.102:36411): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342069.103:36412): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342069.103:36413): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.103:36414): pid=354055 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.119:36415): pid=354096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342069.121:36416): pid=354095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354096 suid=74 rport=38148 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342069.121:36417): pid=354095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354096 suid=74 rport=38148 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342069.195:36418): pid=354095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342069.195:36419): pid=354095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342069.226:36420): pid=354095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342069.226:36421): pid=354095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354096 suid=74 rport=38148 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342069.229:36422): pid=354095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342069.229:36423): pid=354095 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=313 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342069.229:36423): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe25b9bf10 a2=1 a3=0 items=0 ppid=39353 pid=354095 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=313 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342069.229:36423): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342069.231:36424): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342069.252:36425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342069.274:36426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781342069.280:36427): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.281:36428): pid=354108 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342069.283:36429): pid=354108 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342069.325:36430): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342069.325:36431): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.327:36432): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342069.382:36433): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342069.382:36434): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.383:36435): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354108 suid=0 rport=38148 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.383:36436): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342069.386:36437): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342069.387:36438): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342069.388:36439): pid=354095 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342069.501:36440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342069.549:36441): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342069.723:36442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342069.976:36443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342069.976:36444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342070.101:36445): prog-id=1515 op=LOAD type=SYSCALL msg=audit(1781342070.101:36445): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffe68d7a90 a2=90 a3=9500000000 items=0 ppid=354183 pid=354184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342070.101:36445): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342070.166:36446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342070.183:36447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342070.285:36448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342070.531:36449): pid=354213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342070.533:36450): pid=354212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354213 suid=74 rport=38150 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342070.533:36451): pid=354212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354213 suid=74 rport=38150 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342070.609:36452): pid=354212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342070.609:36453): pid=354212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342070.634:36454): pid=354212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342070.634:36455): pid=354212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354213 suid=74 rport=38150 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342070.636:36456): pid=354212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342070.637:36457): pid=354212 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=314 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342070.637:36457): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcbed851e0 a2=1 a3=0 items=0 ppid=39353 pid=354212 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=314 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342070.637:36457): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342070.638:36458): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342070.664:36459): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342070.665:36460): pid=354215 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342070.666:36461): pid=354215 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342070.712:36462): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342070.712:36463): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342070.714:36464): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342070.778:36465): pid=354216 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342070.779:36466): pid=354216 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F766F6C756D652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342070.781:36467): pid=354216 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342070.785:36468): pid=354216 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342070.789:36469): pid=353838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=353839 suid=74 rport=54146 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342070.790:36470): pid=353838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353839 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342070.791:36471): pid=353838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=353838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342070.791:36472): pid=353838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781342070.801:36473): pid=354216 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342070.801:36474): pid=354216 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342070.804:36475): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354215 suid=0 rport=38150 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342070.804:36476): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342070.806:36477): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342070.807:36478): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342070.808:36479): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342070.808:36480): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342070.808:36481): pid=354212 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342071.429:36482): pid=354232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342071.430:36483): pid=354231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354232 suid=74 rport=38156 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342071.430:36484): pid=354231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354232 suid=74 rport=38156 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342071.515:36485): pid=354231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342071.515:36486): pid=354231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342071.544:36487): pid=354231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342071.545:36488): pid=354231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354232 suid=74 rport=38156 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342071.547:36489): pid=354231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342071.548:36490): pid=354231 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=315 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342071.548:36490): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5e94d1f0 a2=1 a3=0 items=0 ppid=39353 pid=354231 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=315 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342071.548:36490): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342071.549:36491): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342071.581:36492): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342071.581:36493): pid=354234 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342071.582:36494): pid=354234 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342071.627:36495): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342071.627:36496): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342071.629:36497): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342071.688:36498): pid=354235 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342071.689:36499): pid=354235 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6261636B75702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342071.689:36500): pid=354235 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342071.692:36501): pid=354235 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342071.705:36502): pid=354235 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342071.705:36503): pid=354235 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342071.707:36504): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354234 suid=0 rport=38156 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342071.708:36505): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354234 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342071.710:36506): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342071.711:36507): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342071.711:36508): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342071.712:36509): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342071.712:36510): pid=354231 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342072.286:36511): pid=354251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342072.288:36512): pid=354250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=354251 suid=74 rport=54176 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342072.288:36513): pid=354250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=354251 suid=74 rport=54176 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342072.351:36514): pid=354253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342072.353:36515): pid=354252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354253 suid=74 rport=38158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342072.353:36516): pid=354252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354253 suid=74 rport=38158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342072.430:36517): pid=354252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342072.430:36518): pid=354252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342072.459:36519): pid=354252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342072.460:36520): pid=354252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354253 suid=74 rport=38158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342072.462:36521): pid=354252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342072.462:36522): pid=354252 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=316 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342072.462:36522): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd8af44450 a2=1 a3=0 items=0 ppid=39353 pid=354252 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=316 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342072.462:36522): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342072.463:36523): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342072.490:36524): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342072.491:36525): pid=354255 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342072.492:36526): pid=354255 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342072.535:36527): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342072.535:36528): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342072.536:36529): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342072.592:36530): pid=354256 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342072.592:36531): pid=354256 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342072.593:36532): pid=354256 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342072.595:36533): pid=354256 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342072.608:36534): pid=354256 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342072.609:36535): pid=354256 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342072.611:36536): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354255 suid=0 rport=38158 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342072.611:36537): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342072.614:36538): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342072.614:36539): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342072.615:36540): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342072.615:36541): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342072.615:36542): pid=354252 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342072.639:36543): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781342072.855:36544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342072.875:36545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342073.004:36546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342073.005:36547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342073.005:36548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342073.140:36549): prog-id=1516 op=LOAD type=SYSCALL msg=audit(1781342073.140:36549): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5dcf4210 a2=90 a3=9500000000 items=0 ppid=354336 pid=354337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342073.140:36549): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342073.203:36550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342073.220:36551): pid=354353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1781342073.221:36552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781342073.221:36553): pid=354346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354353 suid=74 rport=49522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342073.221:36554): pid=354346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354353 suid=74 rport=49522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342073.299:36555): pid=354346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342073.299:36556): pid=354346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342073.311:36557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342073.328:36558): pid=354346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342073.329:36559): pid=354346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354353 suid=74 rport=49522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342073.331:36560): pid=354346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342073.331:36561): pid=354346 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=317 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342073.331:36561): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd10906c10 a2=1 a3=0 items=0 ppid=39353 pid=354346 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=317 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342073.331:36561): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342073.333:36562): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342073.360:36563): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342073.361:36564): pid=354369 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342073.362:36565): pid=354369 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_AUTH msg=audit(1781342073.373:36566): pid=354250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ftpuser1" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342073.407:36567): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342073.407:36568): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342073.410:36569): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342073.478:36570): pid=354370 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342073.478:36571): pid=354370 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342073.480:36572): pid=354370 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342073.485:36573): pid=354370 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342073.500:36574): pid=354370 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342073.500:36575): pid=354370 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342073.502:36576): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354369 suid=0 rport=49522 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342073.503:36577): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342073.505:36578): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342073.505:36579): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342073.506:36580): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342073.506:36581): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342073.506:36582): pid=354346 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342074.182:36583): pid=354386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342074.184:36584): pid=354385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354386 suid=74 rport=49536 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342074.184:36585): pid=354385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354386 suid=74 rport=49536 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342074.273:36586): pid=354385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342074.273:36587): pid=354385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342074.303:36588): pid=354385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342074.303:36589): pid=354385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354386 suid=74 rport=49536 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342074.306:36590): pid=354385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342074.306:36591): pid=354385 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=318 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342074.306:36591): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff2ea41660 a2=1 a3=0 items=0 ppid=39353 pid=354385 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=318 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342074.306:36591): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342074.308:36592): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342074.344:36593): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342074.345:36594): pid=354388 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342074.346:36595): pid=354388 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342074.388:36596): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342074.388:36597): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342074.390:36598): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342074.453:36599): pid=354389 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342074.453:36600): pid=354389 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6261636B656E645F62696E64392E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342074.454:36601): pid=354389 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342074.457:36602): pid=354389 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342074.470:36603): pid=354389 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342074.470:36604): pid=354389 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342074.472:36605): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354388 suid=0 rport=49536 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342074.473:36606): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342074.475:36607): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342074.475:36608): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342074.476:36609): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342074.476:36610): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342074.477:36611): pid=354385 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342074.990:36612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342075.126:36613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342075.131:36614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342075.146:36615): pid=354444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342075.148:36616): pid=354438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354444 suid=74 rport=49548 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342075.148:36617): pid=354438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354444 suid=74 rport=49548 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342075.233:36618): pid=354438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342075.233:36619): pid=354438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342075.256:36620): pid=354438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342075.257:36621): pid=354438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354444 suid=74 rport=49548 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342075.258:36622): pid=354438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342075.258:36623): pid=354438 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=319 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342075.258:36623): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd9ea59160 a2=1 a3=0 items=0 ppid=39353 pid=354438 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=319 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342075.258:36623): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342075.259:36624): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342075.296:36625): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342075.297:36626): pid=354476 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342075.299:36627): pid=354476 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342075.342:36628): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342075.342:36629): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342075.345:36630): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342075.349:36631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342075.414:36632): pid=354477 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342075.415:36633): pid=354477 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342075.416:36634): pid=354477 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342075.421:36635): pid=354477 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342075.437:36636): pid=354477 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342075.437:36637): pid=354477 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342075.440:36638): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354476 suid=0 rport=49548 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342075.440:36639): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342075.446:36640): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342075.446:36641): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342075.446:36642): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342075.446:36643): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342075.446:36644): pid=354438 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342075.719:36645): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342075.862:36646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342075.977:36647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342075.977:36648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342076.057:36649): pid=354537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342076.058:36650): pid=354536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354537 suid=74 rport=49558 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342076.058:36651): pid=354536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354537 suid=74 rport=49558 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342076.067:36652): prog-id=1517 op=LOAD type=SYSCALL msg=audit(1781342076.067:36652): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffffff38700 a2=90 a3=9500000000 items=0 ppid=354533 pid=354534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342076.067:36652): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_AUTH msg=audit(1781342076.140:36653): pid=354536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342076.140:36654): pid=354536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342076.149:36655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342076.161:36656): pid=354536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342076.162:36657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342076.162:36658): pid=354536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354537 suid=74 rport=49558 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342076.163:36659): pid=354536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342076.164:36660): pid=354536 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=320 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342076.164:36660): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc9f1d1fa0 a2=1 a3=0 items=0 ppid=39353 pid=354536 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=320 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342076.164:36660): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342076.165:36661): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342076.202:36662): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342076.204:36663): pid=354553 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342076.231:36664): pid=354553 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342076.274:36665): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342076.274:36666): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342076.276:36667): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342076.302:36668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342076.327:36669): pid=354566 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342076.327:36670): pid=354566 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F70726F64756365722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342076.328:36671): pid=354566 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342076.332:36672): pid=354566 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342076.342:36673): pid=354566 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342076.343:36674): pid=354566 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342076.345:36675): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354553 suid=0 rport=49558 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342076.345:36676): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342076.347:36677): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342076.348:36678): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342076.348:36679): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342076.349:36680): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342076.349:36681): pid=354536 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342076.722:36682): pid=354250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354251 suid=74 rport=54176 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342076.723:36683): pid=354250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354251 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342076.724:36684): pid=354250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342076.724:36685): pid=354250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342076.978:36686): pid=354640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342076.980:36687): pid=354639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354640 suid=74 rport=49566 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342076.980:36688): pid=354639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354640 suid=74 rport=49566 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342077.064:36689): pid=354639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342077.064:36690): pid=354639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342077.088:36691): pid=354639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342077.088:36692): pid=354639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354640 suid=74 rport=49566 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342077.091:36693): pid=354639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342077.091:36694): pid=354639 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=321 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342077.091:36694): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc1ed7f7f0 a2=1 a3=0 items=0 ppid=39353 pid=354639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=321 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342077.091:36694): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342077.093:36695): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342077.128:36696): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342077.130:36697): pid=354642 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342077.131:36698): pid=354642 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342077.174:36699): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342077.174:36700): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342077.176:36701): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342077.239:36702): pid=354643 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342077.239:36703): pid=354643 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6D646E732E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342077.240:36704): pid=354643 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342077.244:36705): pid=354643 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342077.261:36706): pid=354643 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342077.261:36707): pid=354643 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342077.264:36708): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354642 suid=0 rport=49566 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342077.264:36709): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342077.266:36710): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342077.267:36711): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342077.267:36712): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342077.267:36713): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342077.268:36714): pid=354639 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342077.894:36715): pid=354659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342077.896:36716): pid=354658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354659 suid=74 rport=49580 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342077.896:36717): pid=354658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354659 suid=74 rport=49580 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342077.981:36718): pid=354658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342077.981:36719): pid=354658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342078.009:36720): pid=354658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342078.009:36721): pid=354658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354659 suid=74 rport=49580 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342078.012:36722): pid=354658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342078.012:36723): pid=354658 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=322 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342078.012:36723): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd441c4500 a2=1 a3=0 items=0 ppid=39353 pid=354658 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=322 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342078.012:36723): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342078.013:36724): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342078.053:36725): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.054:36726): pid=354661 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342078.056:36727): pid=354661 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342078.098:36728): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342078.098:36729): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.099:36730): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354662 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342078.152:36731): pid=354662 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342078.153:36732): pid=354662 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342078.153:36733): pid=354662 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342078.157:36734): pid=354662 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342078.173:36735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342078.182:36736): pid=354662 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342078.182:36737): pid=354662 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.186:36738): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354661 suid=0 rport=49580 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.186:36739): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342078.188:36740): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342078.189:36741): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342078.189:36742): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342078.189:36743): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.189:36744): pid=354658 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354658 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.208:36745): pid=354687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342078.209:36746): pid=354683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354687 suid=74 rport=49584 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342078.209:36747): pid=354683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354687 suid=74 rport=49584 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342078.299:36748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342078.306:36749): pid=354683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342078.306:36750): pid=354683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342078.327:36751): pid=354683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342078.328:36752): pid=354683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354687 suid=74 rport=49584 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342078.329:36753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781342078.331:36754): pid=354683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342078.331:36755): pid=354683 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=323 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342078.331:36755): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe74373b60 a2=1 a3=0 items=0 ppid=39353 pid=354683 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=323 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342078.331:36755): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342078.332:36756): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342078.355:36757): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.357:36758): pid=354714 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342078.358:36759): pid=354714 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342078.402:36760): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342078.402:36761): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.406:36762): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342078.459:36763): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342078.459:36764): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.459:36765): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354714 suid=0 rport=49584 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342078.461:36766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342078.461:36767): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342078.464:36768): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342078.464:36769): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342078.465:36770): pid=354683 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342078.739:36771): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342078.935:36772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342078.981:36773): pid=354767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342078.982:36774): pid=354751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=354767 suid=74 rport=40118 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342078.983:36775): pid=354751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=354767 suid=74 rport=40118 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342079.228:36776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342079.228:36777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342079.376:36778): prog-id=1518 op=LOAD type=SYSCALL msg=audit(1781342079.376:36778): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffb00bcb30 a2=90 a3=9500000000 items=0 ppid=354783 pid=354784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342079.376:36778): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342079.449:36779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342079.458:36780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342079.597:36781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342079.691:36782): pid=354811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342079.692:36783): pid=354810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354811 suid=74 rport=49594 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342079.693:36784): pid=354810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354811 suid=74 rport=49594 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342079.784:36785): pid=354810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342079.784:36786): pid=354810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342079.814:36787): pid=354810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342079.815:36788): pid=354810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354811 suid=74 rport=49594 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342079.818:36789): pid=354810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342079.818:36790): pid=354810 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=324 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342079.818:36790): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdde8095a0 a2=1 a3=0 items=0 ppid=39353 pid=354810 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=324 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342079.818:36790): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342079.820:36791): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342079.858:36792): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342079.860:36793): pid=354813 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342079.861:36794): pid=354813 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342079.905:36795): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342079.905:36796): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342079.908:36797): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342079.982:36798): pid=354814 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342079.982:36799): pid=354814 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342079.984:36800): pid=354814 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342079.990:36801): pid=354814 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342080.006:36802): pid=354814 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342080.007:36803): pid=354814 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.009:36804): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354813 suid=0 rport=49594 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.010:36805): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342080.012:36806): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342080.012:36807): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342080.013:36808): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342080.013:36809): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.013:36810): pid=354810 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.041:36811): pid=354830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342080.042:36812): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354830 suid=74 rport=49602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342080.042:36813): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354830 suid=74 rport=49602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342080.113:36814): pid=354751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root1" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342080.119:36815): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342080.119:36816): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342080.149:36817): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342080.150:36818): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354830 suid=74 rport=49602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342080.152:36819): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342080.152:36820): pid=354829 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=325 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342080.152:36820): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe9515e170 a2=1 a3=0 items=0 ppid=39353 pid=354829 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=325 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342080.152:36820): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342080.153:36821): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342080.186:36822): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.187:36823): pid=354832 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342080.188:36824): pid=354832 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342080.232:36825): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342080.232:36826): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.233:36827): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.273:36828): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354832 suid=0 rport=49602 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.274:36829): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342080.276:36830): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342080.277:36831): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342080.278:36832): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342080.279:36833): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342080.279:36834): pid=354829 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.401:36835): pid=354847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342081.402:36836): pid=354846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354847 suid=74 rport=49618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342081.402:36837): pid=354846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354847 suid=74 rport=49618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342081.491:36838): pid=354846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342081.491:36839): pid=354846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342081.516:36840): pid=354846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342081.517:36841): pid=354846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354847 suid=74 rport=49618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342081.519:36842): pid=354846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342081.519:36843): pid=354846 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=326 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342081.519:36843): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffedc829940 a2=1 a3=0 items=0 ppid=39353 pid=354846 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=326 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342081.519:36843): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342081.521:36844): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342081.546:36845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.550:36846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.555:36847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.559:36848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.563:36849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.567:36850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.571:36851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.575:36852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.579:36853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.584:36854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342081.600:36855): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.601:36856): pid=354911 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342081.602:36857): pid=354911 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342081.645:36858): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342081.645:36859): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.646:36860): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342081.695:36861): pid=354937 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342081.695:36862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1781342081.695:36863): pid=354937 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342081.696:36864): pid=354937 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342081.704:36865): pid=354937 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342081.716:36866): pid=354937 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342081.716:36867): pid=354937 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.718:36868): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354911 suid=0 rport=49618 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.718:36869): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354911 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342081.721:36870): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342081.721:36871): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342081.721:36872): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342081.721:36873): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.721:36874): pid=354846 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.739:36875): pid=354999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342081.740:36876): pid=354990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354999 suid=74 rport=49630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342081.740:36877): pid=354990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=354999 suid=74 rport=49630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342081.818:36878): pid=354990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342081.818:36879): pid=354990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342081.821:36880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342081.824:36881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342081.842:36882): pid=354990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342081.842:36883): pid=354990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354999 suid=74 rport=49630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342081.844:36884): pid=354990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342081.844:36885): pid=354990 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=327 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342081.844:36885): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe37cefb60 a2=1 a3=0 items=0 ppid=39353 pid=354990 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=327 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342081.844:36885): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342081.845:36886): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342081.857:36887): prog-id=0 op=UNLOAD type=USER_START msg=audit(1781342081.864:36888): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.864:36889): pid=355078 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342081.865:36890): pid=355078 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342081.889:36891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342081.890:36892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342081.895:36893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342081.908:36894): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342081.908:36895): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.910:36896): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342081.939:36897): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342081.939:36898): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.940:36899): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355078 suid=0 rport=49630 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.941:36900): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342081.943:36901): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342081.943:36902): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342081.943:36903): pid=354990 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342081.976:36904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.056:36905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342082.076:36906): pid=354751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354767 suid=74 rport=40118 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342082.077:36907): pid=354751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354767 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342082.078:36908): pid=354751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=354751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342082.078:36909): pid=354751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.087:36910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.101:36911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.115:36912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.131:36913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.145:36914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.230:36915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.278:36916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.325:36917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.330:36918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342082.477:36919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.477:36920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342082.608:36921): prog-id=1519 op=LOAD type=SYSCALL msg=audit(1781342082.608:36921): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd23e23f20 a2=90 a3=9500000000 items=0 ppid=355224 pid=355225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342082.608:36921): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342082.683:36922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342082.696:36923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342082.786:36924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342083.121:36925): pid=355255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342083.123:36926): pid=355254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355255 suid=74 rport=49638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342083.123:36927): pid=355254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355255 suid=74 rport=49638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342083.197:36928): pid=355254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342083.197:36929): pid=355254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342083.225:36930): pid=355254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342083.225:36931): pid=355254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355255 suid=74 rport=49638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342083.227:36932): pid=355254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342083.227:36933): pid=355254 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=328 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342083.227:36933): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc9c144370 a2=1 a3=0 items=0 ppid=39353 pid=355254 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=328 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342083.227:36933): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342083.228:36934): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342083.252:36935): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.253:36936): pid=355257 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342083.254:36937): pid=355257 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342083.297:36938): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342083.297:36939): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.301:36940): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342083.366:36941): pid=355258 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342083.367:36942): pid=355258 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342083.368:36943): pid=355258 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342083.373:36944): pid=355258 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342083.388:36945): pid=355258 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342083.388:36946): pid=355258 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.391:36947): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355257 suid=0 rport=49638 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.391:36948): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342083.393:36949): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342083.394:36950): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342083.394:36951): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342083.394:36952): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.394:36953): pid=355254 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.415:36954): pid=355274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355274 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342083.416:36955): pid=355273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355274 suid=74 rport=45418 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342083.417:36956): pid=355273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355274 suid=74 rport=45418 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342083.491:36957): pid=355273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342083.491:36958): pid=355273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342083.519:36959): pid=355273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342083.519:36960): pid=355273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355274 suid=74 rport=45418 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342083.521:36961): pid=355273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342083.521:36962): pid=355273 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=329 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342083.521:36962): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe15baa810 a2=1 a3=0 items=0 ppid=39353 pid=355273 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=329 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342083.521:36962): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342083.523:36963): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342083.556:36964): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.557:36965): pid=355276 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342083.558:36966): pid=355276 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342083.601:36967): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342083.601:36968): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.603:36969): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342083.638:36970): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342083.638:36971): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.638:36972): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355276 suid=0 rport=45418 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.641:36973): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342083.643:36974): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342083.643:36975): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342083.644:36976): pid=355273 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342084.794:36977): pid=355297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342084.795:36978): pid=355296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355297 suid=74 rport=45428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342084.795:36979): pid=355296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355297 suid=74 rport=45428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342084.877:36980): pid=355296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342084.877:36981): pid=355296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342084.906:36982): pid=355296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342084.906:36983): pid=355296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355297 suid=74 rport=45428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342084.908:36984): pid=355296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342084.909:36985): pid=355296 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=330 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342084.909:36985): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed868f400 a2=1 a3=0 items=0 ppid=39353 pid=355296 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=330 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342084.909:36985): proctitle=737368643A20726F6F74205B707269765D type=BPF msg=audit(1781342084.910:36986): prog-id=0 op=UNLOAD type=USER_ROLE_CHANGE msg=audit(1781342084.910:36987): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342084.933:36988): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342084.934:36989): pid=355308 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342084.936:36990): pid=355308 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342084.979:36991): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342084.979:36992): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342084.981:36993): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342085.045:36994): pid=355314 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342085.046:36995): pid=355314 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342085.047:36996): pid=355314 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342085.050:36997): pid=355314 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342085.063:36998): pid=355314 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342085.064:36999): pid=355314 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.066:37000): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355308 suid=0 rport=45428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.067:37001): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342085.070:37002): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342085.071:37003): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342085.071:37004): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342085.072:37005): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.072:37006): pid=355296 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.093:37007): pid=355342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342085.095:37008): pid=355337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355342 suid=74 rport=45444 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342085.095:37009): pid=355337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355342 suid=74 rport=45444 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342085.138:37010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342085.171:37011): pid=355337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342085.171:37012): pid=355337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342085.199:37013): pid=355337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342085.200:37014): pid=355337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355342 suid=74 rport=45444 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342085.202:37015): pid=355337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342085.202:37016): pid=355337 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=331 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342085.202:37016): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa1e140b0 a2=1 a3=0 items=0 ppid=39353 pid=355337 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=331 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342085.202:37016): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342085.204:37017): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342085.240:37018): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.242:37019): pid=355345 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342085.243:37020): pid=355345 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342085.286:37021): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342085.286:37022): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.287:37023): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342085.325:37024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342085.325:37025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342085.346:37026): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355345 suid=0 rport=45444 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.347:37027): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342085.349:37028): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342085.349:37029): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342085.350:37030): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342085.350:37031): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342085.350:37032): pid=355337 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342085.456:37033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342085.464:37034): prog-id=1520 op=LOAD type=SYSCALL msg=audit(1781342085.464:37034): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcfc5f3120 a2=90 a3=9500000000 items=0 ppid=355373 pid=355374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342085.464:37034): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342085.537:37035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342085.549:37036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342085.661:37037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342085.777:37038): pid=355429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342085.783:37039): pid=355420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=355429 suid=74 rport=32952 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342085.783:37040): pid=355420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=355429 suid=74 rport=32952 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342085.993:37041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342085.997:37042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342086.001:37043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342086.005:37044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342086.314:37045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342086.335:37046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342086.416:37047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342086.422:37048): pid=355559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342086.422:37049): pid=355558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355559 suid=74 rport=45446 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342086.423:37050): pid=355558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355559 suid=74 rport=45446 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342086.431:37051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342086.456:37052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342086.496:37053): pid=355558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342086.496:37054): pid=355558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342086.520:37055): pid=355558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342086.520:37056): pid=355558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355559 suid=74 rport=45446 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342086.522:37057): pid=355558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342086.523:37058): pid=355558 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=332 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342086.523:37058): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc717050d0 a2=1 a3=0 items=0 ppid=39353 pid=355558 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=332 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342086.523:37058): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342086.524:37059): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342086.559:37060): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.560:37061): pid=355561 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342086.561:37062): pid=355561 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342086.605:37063): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342086.605:37064): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.608:37065): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342086.629:37066): pid=355420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="openclaw" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342086.675:37067): pid=355563 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342086.675:37068): pid=355563 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342086.677:37069): pid=355563 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342086.684:37070): pid=355563 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342086.697:37071): pid=355563 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342086.697:37072): pid=355563 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.700:37073): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355561 suid=0 rport=45446 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.700:37074): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342086.702:37075): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342086.702:37076): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342086.703:37077): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342086.703:37078): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.703:37079): pid=355558 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.721:37080): pid=355579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342086.722:37081): pid=355578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355579 suid=74 rport=45462 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342086.722:37082): pid=355578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355579 suid=74 rport=45462 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342086.800:37083): pid=355578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342086.800:37084): pid=355578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342086.821:37085): pid=355578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342086.822:37086): pid=355578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355579 suid=74 rport=45462 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342086.823:37087): pid=355578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342086.823:37088): pid=355578 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=333 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342086.823:37088): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe9dcae0a0 a2=1 a3=0 items=0 ppid=39353 pid=355578 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=333 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342086.823:37088): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342086.824:37089): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342086.825:37090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342086.826:37091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342086.855:37092): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.856:37093): pid=355591 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342086.858:37094): pid=355591 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342086.900:37095): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342086.900:37096): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.903:37097): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342086.934:37098): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342086.934:37099): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.934:37100): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355591 suid=0 rport=45462 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.934:37101): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342086.936:37102): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342086.937:37103): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342086.937:37104): pid=355578 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342087.250:37105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342088.039:37106): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1781342088.084:37107): pid=355631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342088.085:37108): pid=355630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355631 suid=74 rport=45470 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342088.085:37109): pid=355630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355631 suid=74 rport=45470 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342088.158:37110): pid=355630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342088.159:37111): pid=355630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342088.187:37112): pid=355630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342088.188:37113): pid=355630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355631 suid=74 rport=45470 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342088.190:37114): pid=355630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342088.191:37115): pid=355630 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=334 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342088.191:37115): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff672e06a0 a2=1 a3=0 items=0 ppid=39353 pid=355630 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=334 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342088.191:37115): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342088.192:37116): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342088.228:37117): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.230:37118): pid=355646 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342088.231:37119): pid=355646 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342088.237:37120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342088.275:37121): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342088.275:37122): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.278:37123): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355648 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342088.333:37124): pid=355648 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342088.333:37125): pid=355648 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342088.334:37126): pid=355648 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342088.339:37127): pid=355648 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342088.358:37128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342088.360:37129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342088.360:37130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342088.372:37131): pid=355648 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342088.373:37132): pid=355648 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.375:37133): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355646 suid=0 rport=45470 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.376:37134): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342088.379:37135): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342088.379:37136): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342088.380:37137): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342088.380:37138): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.380:37139): pid=355630 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.404:37140): pid=355684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342088.405:37141): pid=355677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355684 suid=74 rport=45474 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342088.405:37142): pid=355677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355684 suid=74 rport=45474 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342088.499:37143): pid=355677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342088.499:37144): pid=355677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342088.531:37145): pid=355677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342088.531:37146): pid=355677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355684 suid=74 rport=45474 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342088.533:37147): pid=355677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342088.533:37148): pid=355677 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=335 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342088.533:37148): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffebd94b790 a2=1 a3=0 items=0 ppid=39353 pid=355677 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=335 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342088.533:37148): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342088.534:37149): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342088.564:37150): prog-id=1521 op=LOAD type=SYSCALL msg=audit(1781342088.564:37150): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe3353eb40 a2=90 a3=9500000000 items=0 ppid=355701 pid=355702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342088.564:37150): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_START msg=audit(1781342088.575:37151): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.576:37152): pid=355704 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342088.578:37153): pid=355704 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342088.620:37154): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342088.620:37155): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.629:37156): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342088.631:37157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342088.648:37158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342088.670:37159): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342088.670:37160): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.670:37161): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355704 suid=0 rport=45474 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.670:37162): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342088.672:37163): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342088.672:37164): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342088.673:37165): pid=355677 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342088.767:37166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342088.783:37167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342089.798:37168): pid=355754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342089.800:37169): pid=355753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355754 suid=74 rport=45486 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342089.800:37170): pid=355753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355754 suid=74 rport=45486 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342089.882:37171): pid=355753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342089.882:37172): pid=355753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342089.901:37173): pid=355753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342089.901:37174): pid=355753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355754 suid=74 rport=45486 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342089.904:37175): pid=355753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342089.904:37176): pid=355753 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=336 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342089.904:37176): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd7e06d440 a2=1 a3=0 items=0 ppid=39353 pid=355753 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=336 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342089.904:37176): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342089.905:37177): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342089.938:37178): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342089.939:37179): pid=355757 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342089.941:37180): pid=355757 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342089.984:37181): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342089.984:37182): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342089.987:37183): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342090.041:37184): pid=355758 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342090.041:37185): pid=355758 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342090.042:37186): pid=355758 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342090.045:37187): pid=355758 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342090.060:37188): pid=355758 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342090.060:37189): pid=355758 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.062:37190): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355757 suid=0 rport=45486 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.063:37191): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342090.066:37192): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342090.066:37193): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342090.067:37194): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342090.067:37195): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.067:37196): pid=355753 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.092:37197): pid=355774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342090.093:37198): pid=355773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355774 suid=74 rport=45490 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342090.093:37199): pid=355773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355774 suid=74 rport=45490 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342090.185:37200): pid=355773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342090.185:37201): pid=355773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342090.213:37202): pid=355773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342090.213:37203): pid=355773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355774 suid=74 rport=45490 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342090.216:37204): pid=355773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342090.216:37205): pid=355773 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=337 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342090.216:37205): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe17e27ed0 a2=1 a3=0 items=0 ppid=39353 pid=355773 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=337 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342090.216:37205): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342090.217:37206): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342090.244:37207): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.245:37208): pid=355776 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342090.245:37209): pid=355776 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342090.288:37210): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342090.288:37211): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.290:37212): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342090.337:37213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342090.343:37214): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355776 suid=0 rport=45490 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.343:37215): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342090.345:37216): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342090.345:37217): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342090.346:37218): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342090.346:37219): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.346:37220): pid=355773 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342090.830:37221): pid=355420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355429 suid=74 rport=32952 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342090.831:37222): pid=355420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355429 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342090.832:37223): pid=355420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342090.832:37224): pid=355420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342091.062:37225): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781342091.127:37226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342091.306:37227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342091.435:37228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342091.436:37229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342091.574:37230): prog-id=1522 op=LOAD type=SYSCALL msg=audit(1781342091.574:37230): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdffe22b70 a2=90 a3=9500000000 items=0 ppid=355886 pid=355887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342091.574:37230): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342091.629:37231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342091.642:37232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342091.783:37233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342091.909:37234): pid=355917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355917 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342091.910:37235): pid=355916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355917 suid=74 rport=45504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342091.910:37236): pid=355916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355917 suid=74 rport=45504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342091.985:37237): pid=355916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342091.985:37238): pid=355916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342092.017:37239): pid=355916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342092.017:37240): pid=355916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355917 suid=74 rport=45504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342092.019:37241): pid=355916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342092.020:37242): pid=355916 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=338 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342092.020:37242): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff88329660 a2=1 a3=0 items=0 ppid=39353 pid=355916 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=338 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342092.020:37242): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342092.022:37243): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342092.051:37244): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.053:37245): pid=355925 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342092.054:37246): pid=355925 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342092.098:37247): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342092.098:37248): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.102:37249): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342092.144:37250): pid=355926 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342092.144:37251): pid=355926 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342092.146:37252): pid=355926 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342092.150:37253): pid=355926 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342092.163:37254): pid=355926 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342092.163:37255): pid=355926 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.166:37256): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355925 suid=0 rport=45504 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.166:37257): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342092.169:37258): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342092.169:37259): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342092.170:37260): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342092.170:37261): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.170:37262): pid=355916 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.190:37263): pid=355942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342092.193:37264): pid=355941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355942 suid=74 rport=45520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342092.193:37265): pid=355941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=355942 suid=74 rport=45520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342092.269:37266): pid=355941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342092.269:37267): pid=355941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342092.286:37268): pid=355941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342092.286:37269): pid=355941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355942 suid=74 rport=45520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342092.289:37270): pid=355941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342092.289:37271): pid=355941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=339 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342092.289:37271): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5a85e030 a2=1 a3=0 items=0 ppid=39353 pid=355941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=339 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342092.289:37271): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342092.290:37272): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342092.329:37273): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.330:37274): pid=355944 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342092.331:37275): pid=355944 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342092.373:37276): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342092.373:37277): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.375:37278): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.419:37279): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355944 suid=0 rport=45520 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.419:37280): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342092.422:37281): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342092.422:37282): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342092.423:37283): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342092.423:37284): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.423:37285): pid=355941 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355941 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342092.832:37286): pid=355959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342092.912:37287): pid=355958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=355959 suid=74 rport=59264 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342092.912:37288): pid=355958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=355959 suid=74 rport=59264 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342092.987:37289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342092.991:37290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342093.206:37291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342093.421:37292): pid=355958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342093.547:37293): pid=356007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342093.548:37294): pid=356006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356007 suid=74 rport=44774 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342093.548:37295): pid=356006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356007 suid=74 rport=44774 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342093.625:37296): pid=356006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342093.625:37297): pid=356006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342093.655:37298): pid=356006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342093.655:37299): pid=356006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356007 suid=74 rport=44774 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342093.657:37300): pid=356006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342093.657:37301): pid=356006 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=340 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342093.657:37301): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3da77bd0 a2=1 a3=0 items=0 ppid=39353 pid=356006 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=340 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342093.657:37301): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342093.659:37302): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342093.696:37303): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342093.697:37304): pid=356009 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342093.699:37305): pid=356009 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342093.743:37306): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342093.743:37307): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342093.746:37308): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342093.814:37309): pid=356010 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342093.814:37310): pid=356010 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342093.816:37311): pid=356010 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342093.821:37312): pid=356010 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342093.832:37313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342093.840:37314): pid=356010 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342093.841:37315): pid=356010 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342093.844:37316): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356009 suid=0 rport=44774 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342093.845:37317): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342093.848:37318): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342093.849:37319): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342093.850:37320): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342093.850:37321): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342093.850:37322): pid=356006 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342093.874:37323): pid=356036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342093.876:37324): pid=356031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356036 suid=74 rport=44780 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342093.876:37325): pid=356031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356036 suid=74 rport=44780 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342093.959:37326): pid=356031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342093.959:37327): pid=356031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342093.989:37328): pid=356031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342093.989:37329): pid=356031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356036 suid=74 rport=44780 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342093.991:37330): pid=356031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342093.992:37331): pid=356031 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=341 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342093.992:37331): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe93d30b40 a2=1 a3=0 items=0 ppid=39353 pid=356031 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=341 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342093.992:37331): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342093.993:37332): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342094.005:37333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781342094.027:37334): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342094.028:37335): pid=356053 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342094.030:37336): pid=356053 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342094.073:37337): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342094.073:37338): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342094.075:37339): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356054 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342094.122:37340): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356053 suid=0 rport=44780 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342094.122:37341): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342094.127:37342): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342094.127:37343): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342094.128:37344): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342094.128:37345): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342094.128:37346): pid=356031 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342094.141:37347): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342094.349:37348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342094.477:37349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342094.477:37350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342094.588:37351): prog-id=1523 op=LOAD type=SYSCALL msg=audit(1781342094.588:37351): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3fcfe470 a2=90 a3=9500000000 items=0 ppid=356109 pid=356110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342094.588:37351): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342094.644:37352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342094.658:37353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342094.792:37354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342095.289:37355): pid=356144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356144 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342095.291:37356): pid=356143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356144 suid=74 rport=44784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342095.291:37357): pid=356143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356144 suid=74 rport=44784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342095.370:37358): pid=356143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342095.370:37359): pid=356143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342095.400:37360): pid=356143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342095.400:37361): pid=356143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356144 suid=74 rport=44784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342095.403:37362): pid=356143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342095.403:37363): pid=356143 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=342 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342095.403:37363): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc30aa8570 a2=1 a3=0 items=0 ppid=39353 pid=356143 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=342 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342095.403:37363): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342095.404:37364): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342095.431:37365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342095.437:37366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342095.454:37367): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.456:37368): pid=356159 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342095.458:37369): pid=356159 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342095.502:37370): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342095.502:37371): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.505:37372): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356169 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.509:37373): pid=355958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355959 suid=74 rport=59264 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342095.509:37374): pid=355958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355959 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342095.510:37375): pid=355958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=355958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342095.510:37376): pid=355958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342095.567:37377): pid=356169 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342095.567:37378): pid=356169 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342095.568:37379): pid=356169 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342095.572:37380): pid=356169 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342095.585:37381): pid=356169 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342095.585:37382): pid=356169 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.588:37383): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356159 suid=0 rport=44784 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.589:37384): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342095.592:37385): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342095.592:37386): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342095.593:37387): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342095.593:37388): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.594:37389): pid=356143 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.617:37390): pid=356208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_STOP msg=audit(1781342095.617:37391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781342095.618:37392): pid=356204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356208 suid=74 rport=44800 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342095.618:37393): pid=356204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356208 suid=74 rport=44800 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342095.632:37394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342095.649:37395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342095.693:37396): pid=356204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342095.693:37397): pid=356204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342095.713:37398): pid=356204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342095.718:37399): pid=356204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356208 suid=74 rport=44800 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342095.720:37400): pid=356204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342095.720:37401): pid=356204 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=343 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342095.720:37401): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5deef120 a2=1 a3=0 items=0 ppid=39353 pid=356204 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=343 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342095.720:37401): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342095.722:37402): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342095.760:37403): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.762:37404): pid=356210 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342095.763:37405): pid=356210 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342095.807:37406): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342095.807:37407): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.810:37408): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342095.863:37409): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342095.863:37410): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.863:37411): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356210 suid=0 rport=44800 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.864:37412): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342095.867:37413): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342095.867:37414): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342095.868:37415): pid=356204 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342097.002:37416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342097.009:37417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342097.014:37418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.098:37419): pid=356313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342097.099:37420): pid=356304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356313 suid=74 rport=44814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342097.099:37421): pid=356304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356313 suid=74 rport=44814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342097.139:37422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342097.182:37423): pid=356304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.183:37424): pid=356304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342097.184:37425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342097.205:37426): pid=356304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.206:37427): pid=356304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356313 suid=74 rport=44814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342097.207:37428): pid=356304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342097.208:37429): pid=356304 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=344 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342097.208:37429): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe381aa430 a2=1 a3=0 items=0 ppid=39353 pid=356304 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=344 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342097.208:37429): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342097.209:37430): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342097.246:37431): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.248:37432): pid=356351 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342097.249:37433): pid=356351 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342097.255:37434): prog-id=0 op=UNLOAD type=USER_LOGIN msg=audit(1781342097.293:37435): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342097.293:37436): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.297:37437): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342097.361:37438): pid=356371 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342097.361:37439): pid=356371 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342097.362:37440): pid=356371 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342097.367:37441): pid=356371 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342097.386:37442): pid=356371 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342097.386:37443): pid=356371 uid=0 auid=0 ses=344 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.389:37444): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356351 suid=0 rport=44814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.389:37445): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342097.392:37446): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342097.392:37447): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342097.393:37448): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342097.393:37449): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.393:37450): pid=356304 uid=0 auid=0 ses=344 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356304 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342097.393:37451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.412:37452): pid=356389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342097.413:37453): pid=356387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356389 suid=74 rport=44826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342097.413:37454): pid=356387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356389 suid=74 rport=44826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342097.501:37455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342097.512:37456): pid=356387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.512:37457): pid=356387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342097.543:37458): pid=356387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.547:37459): pid=356387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356389 suid=74 rport=44826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342097.550:37460): pid=356387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342097.550:37461): pid=356387 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=345 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342097.550:37461): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb9e9e660 a2=1 a3=0 items=0 ppid=39353 pid=356387 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=345 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342097.550:37461): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342097.551:37462): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342097.583:37463): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.585:37464): pid=356403 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342097.586:37465): pid=356403 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342097.630:37466): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342097.630:37467): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.631:37468): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342097.667:37469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342097.667:37470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.692:37471): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356403 suid=0 rport=44826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342097.693:37472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342097.701:37473): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342097.704:37474): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342097.704:37475): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342097.705:37476): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342097.705:37477): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342097.705:37478): pid=356387 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342097.818:37479): prog-id=1524 op=LOAD type=SYSCALL msg=audit(1781342097.818:37479): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd99bb13f0 a2=90 a3=9500000000 items=0 ppid=356443 pid=356444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342097.818:37479): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342097.885:37480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342097.899:37481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342097.912:37482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342098.045:37483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342098.885:37484): pid=356479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342098.886:37485): pid=356478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356479 suid=74 rport=44828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342098.886:37486): pid=356478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356479 suid=74 rport=44828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342098.979:37487): pid=356478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342098.979:37488): pid=356478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342099.010:37489): pid=356478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342099.011:37490): pid=356478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356479 suid=74 rport=44828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342099.013:37491): pid=356478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342099.013:37492): pid=356478 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=346 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342099.013:37492): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd4d60d7f0 a2=1 a3=0 items=0 ppid=39353 pid=356478 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=346 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342099.013:37492): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342099.016:37493): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342099.045:37494): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342099.047:37495): pid=356481 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342099.048:37496): pid=356481 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342099.092:37497): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342099.092:37498): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342099.096:37499): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342099.157:37500): pid=356482 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342099.157:37501): pid=356482 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342099.160:37502): pid=356482 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342099.165:37503): pid=356482 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342099.179:37504): pid=356482 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342099.179:37505): pid=356482 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342099.182:37506): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356481 suid=0 rport=44828 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342099.183:37507): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342099.186:37508): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342099.186:37509): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342099.187:37510): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342099.187:37511): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342099.187:37512): pid=356478 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342099.848:37513): pid=356499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342099.849:37514): pid=356498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356499 suid=74 rport=44832 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342099.849:37515): pid=356498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356499 suid=74 rport=44832 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342099.934:37516): pid=356498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342099.934:37517): pid=356498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342099.962:37518): pid=356498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342099.963:37519): pid=356498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356499 suid=74 rport=44832 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342099.965:37520): pid=356498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342099.965:37521): pid=356498 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=347 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342099.965:37521): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd17a90280 a2=1 a3=0 items=0 ppid=39353 pid=356498 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=347 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342099.965:37521): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342099.966:37522): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342099.978:37523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342099.981:37524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342099.992:37525): pid=356502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342099.993:37526): pid=356497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=356502 suid=74 rport=59358 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342099.994:37527): pid=356497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=356502 suid=74 rport=59358 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_START msg=audit(1781342100.019:37528): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342100.020:37529): pid=356520 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342100.021:37530): pid=356520 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342100.063:37531): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342100.063:37532): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342100.069:37533): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342100.112:37534): pid=356528 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342100.113:37535): pid=356528 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342100.113:37536): pid=356528 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342100.117:37537): pid=356528 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342100.127:37538): pid=356528 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342100.127:37539): pid=356528 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342100.132:37540): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356520 suid=0 rport=44832 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342100.135:37541): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342100.137:37542): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342100.137:37543): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342100.138:37544): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342100.138:37545): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342100.138:37546): pid=356498 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342100.177:37547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342100.323:37548): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342100.341:37549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342100.485:37550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342100.567:37551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342100.726:37552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342100.726:37553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342100.793:37554): pid=356608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342100.794:37555): pid=356605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356608 suid=74 rport=44846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342100.794:37556): pid=356605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356608 suid=74 rport=44846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342100.845:37557): prog-id=1525 op=LOAD type=SYSCALL msg=audit(1781342100.845:37557): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe6bfab280 a2=90 a3=9500000000 items=0 ppid=356610 pid=356611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342100.845:37557): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_AUTH msg=audit(1781342100.871:37558): pid=356605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342100.871:37559): pid=356605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342100.902:37560): pid=356605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342100.902:37561): pid=356605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356608 suid=74 rport=44846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342100.912:37562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781342100.914:37563): pid=356605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342100.914:37564): pid=356605 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=348 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342100.914:37564): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffceecf99f0 a2=1 a3=0 items=0 ppid=39353 pid=356605 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=348 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342100.914:37564): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342100.916:37565): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342100.927:37566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342100.947:37567): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342100.948:37568): pid=356630 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342100.949:37569): pid=356630 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342100.992:37570): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342100.992:37571): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342100.994:37572): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342101.018:37573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342101.026:37574): pid=356639 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342101.026:37575): pid=356639 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342101.027:37576): pid=356639 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342101.029:37577): pid=356639 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342101.038:37578): pid=356639 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342101.038:37579): pid=356639 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.040:37580): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356630 suid=0 rport=44846 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.040:37581): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342101.042:37582): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342101.042:37583): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342101.042:37584): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342101.042:37585): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.042:37586): pid=356605 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342101.077:37587): pid=356497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ts3" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342101.294:37588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342101.629:37589): pid=356657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342101.630:37590): pid=356656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356657 suid=74 rport=44848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342101.631:37591): pid=356656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356657 suid=74 rport=44848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342101.704:37592): pid=356656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342101.704:37593): pid=356656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342101.724:37594): pid=356656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342101.724:37595): pid=356656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356657 suid=74 rport=44848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342101.727:37596): pid=356656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342101.727:37597): pid=356656 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=349 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342101.727:37597): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffead8aa720 a2=1 a3=0 items=0 ppid=39353 pid=356656 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=349 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342101.727:37597): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342101.728:37598): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342101.756:37599): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.757:37600): pid=356659 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342101.758:37601): pid=356659 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342101.801:37602): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342101.801:37603): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.803:37604): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342101.837:37605): pid=356660 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342101.837:37606): pid=356660 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342101.839:37607): pid=356660 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342101.841:37608): pid=356660 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342101.852:37609): pid=356660 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342101.852:37610): pid=356660 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.854:37611): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356659 suid=0 rport=44848 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.854:37612): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342101.856:37613): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342101.857:37614): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342101.857:37615): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342101.857:37616): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342101.858:37617): pid=356656 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342102.499:37618): pid=356676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342102.500:37619): pid=356675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356676 suid=74 rport=44862 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342102.500:37620): pid=356675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356676 suid=74 rport=44862 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342102.579:37621): pid=356675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342102.579:37622): pid=356675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342102.607:37623): pid=356675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342102.608:37624): pid=356675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356676 suid=74 rport=44862 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342102.610:37625): pid=356675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342102.610:37626): pid=356675 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=350 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342102.610:37626): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef94e6e30 a2=1 a3=0 items=0 ppid=39353 pid=356675 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=350 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342102.610:37626): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342102.611:37627): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342102.640:37628): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342102.642:37629): pid=356678 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342102.644:37630): pid=356678 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342102.686:37631): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342102.686:37632): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342102.687:37633): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342102.738:37634): pid=356679 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342102.738:37635): pid=356679 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342102.738:37636): pid=356679 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342102.741:37637): pid=356679 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342102.755:37638): pid=356679 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342102.755:37639): pid=356679 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342102.757:37640): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356678 suid=0 rport=44862 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342102.757:37641): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342102.760:37642): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342102.760:37643): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342102.761:37644): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342102.761:37645): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342102.761:37646): pid=356675 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342103.199:37647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342103.204:37648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342103.337:37649): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342103.338:37650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342103.374:37651): pid=356726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342103.376:37652): pid=356719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356726 suid=74 rport=42354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342103.376:37653): pid=356719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356726 suid=74 rport=42354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342103.456:37654): pid=356719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342103.456:37655): pid=356719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342103.478:37656): pid=356719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342103.478:37657): pid=356719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356726 suid=74 rport=42354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342103.481:37658): pid=356719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342103.481:37659): pid=356719 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=351 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342103.481:37659): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe60eac6e0 a2=1 a3=0 items=0 ppid=39353 pid=356719 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=351 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342103.481:37659): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342103.483:37660): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342103.501:37661): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.503:37662): pid=356740 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342103.504:37663): pid=356740 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342103.533:37664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342103.547:37665): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342103.547:37666): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.549:37667): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342103.591:37668): pid=356743 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342103.592:37669): pid=356743 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342103.593:37670): pid=356743 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342103.595:37671): pid=356743 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342103.607:37672): pid=356743 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342103.607:37673): pid=356743 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.609:37674): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356740 suid=0 rport=42354 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.610:37675): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342103.612:37676): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342103.612:37677): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342103.613:37678): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342103.613:37679): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.613:37680): pid=356719 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.637:37681): pid=356759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342103.638:37682): pid=356758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356759 suid=74 rport=42364 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342103.638:37683): pid=356758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356759 suid=74 rport=42364 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342103.712:37684): pid=356758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342103.712:37685): pid=356758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342103.726:37686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342103.726:37687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342103.745:37688): pid=356758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342103.746:37689): pid=356758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356759 suid=74 rport=42364 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342103.748:37690): pid=356758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342103.749:37691): pid=356758 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=352 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342103.749:37691): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd99cf2840 a2=1 a3=0 items=0 ppid=39353 pid=356758 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=352 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342103.749:37691): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342103.750:37692): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342103.778:37693): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.779:37694): pid=356772 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342103.781:37695): pid=356772 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342103.824:37696): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342103.824:37697): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.825:37698): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342103.875:37699): prog-id=1526 op=LOAD type=SYSCALL msg=audit(1781342103.875:37699): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff2cc4bfe0 a2=90 a3=9500000000 items=0 ppid=356776 pid=356777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342103.875:37699): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=CRYPTO_KEY_USER msg=audit(1781342103.882:37700): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356772 suid=0 rport=42364 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.882:37701): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342103.885:37702): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342103.885:37703): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342103.886:37704): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342103.886:37705): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342103.886:37706): pid=356758 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342103.944:37707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342103.958:37708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342103.983:37709): pid=356497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356502 suid=74 rport=59358 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342103.984:37710): pid=356497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356502 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342103.985:37711): pid=356497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342103.985:37712): pid=356497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342104.084:37713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342105.020:37714): pid=356820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342105.021:37715): pid=356819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356820 suid=74 rport=42366 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342105.021:37716): pid=356819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356820 suid=74 rport=42366 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342105.098:37717): pid=356819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342105.098:37718): pid=356819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342105.127:37719): pid=356819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342105.128:37720): pid=356819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356820 suid=74 rport=42366 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342105.130:37721): pid=356819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342105.131:37722): pid=356819 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=353 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342105.131:37722): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe9d210c90 a2=1 a3=0 items=0 ppid=39353 pid=356819 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=353 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342105.131:37722): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342105.132:37723): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342105.155:37724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342105.171:37725): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342105.172:37726): pid=356828 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342105.174:37727): pid=356828 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342105.217:37728): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342105.217:37729): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342105.219:37730): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342105.274:37731): pid=356836 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342105.274:37732): pid=356836 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342105.276:37733): pid=356836 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342105.280:37734): pid=356836 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342105.296:37735): pid=356836 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342105.296:37736): pid=356836 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342105.299:37737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342105.299:37738): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356828 suid=0 rport=42366 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342105.299:37739): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342105.302:37740): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342105.302:37741): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342105.303:37742): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342105.303:37743): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342105.303:37744): pid=356819 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342105.919:37745): pid=356858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342105.921:37746): pid=356857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356858 suid=74 rport=42382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342105.921:37747): pid=356857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356858 suid=74 rport=42382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342105.988:37748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342105.997:37749): pid=356857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342105.997:37750): pid=356857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342106.027:37751): pid=356857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342106.028:37752): pid=356857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356858 suid=74 rport=42382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342106.030:37753): pid=356857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342106.031:37754): pid=356857 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=354 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342106.031:37754): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6cb4e140 a2=1 a3=0 items=0 ppid=39353 pid=356857 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342106.031:37754): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342106.032:37755): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342106.070:37756): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342106.071:37757): pid=356874 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342106.073:37758): pid=356874 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342106.117:37759): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342106.117:37760): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342106.118:37761): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342106.121:37762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342106.175:37763): pid=356881 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342106.176:37764): pid=356881 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342106.176:37765): pid=356881 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342106.179:37766): pid=356881 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342106.189:37767): pid=356881 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342106.189:37768): pid=356881 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342106.192:37769): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356874 suid=0 rport=42382 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342106.192:37770): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342106.194:37771): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342106.195:37772): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342106.196:37773): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342106.196:37774): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342106.196:37775): pid=356857 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342106.460:37776): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1781342106.491:37777): pid=356912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342106.582:37778): pid=356899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=356912 suid=74 rport=33068 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342106.582:37779): pid=356899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=356912 suid=74 rport=33068 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342106.705:37780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342106.795:37781): pid=356929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342106.796:37782): pid=356928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356929 suid=74 rport=42396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342106.796:37783): pid=356928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356929 suid=74 rport=42396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342106.878:37784): pid=356928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342106.878:37785): pid=356928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342106.906:37786): pid=356928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342106.906:37787): pid=356928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356929 suid=74 rport=42396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342106.910:37788): pid=356928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342106.910:37789): pid=356928 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=355 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342106.910:37789): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffeec03e60 a2=1 a3=0 items=0 ppid=39353 pid=356928 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=355 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342106.910:37789): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342106.911:37790): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342106.915:37791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342106.915:37792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342106.945:37793): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342106.946:37794): pid=356937 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342106.947:37795): pid=356937 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342106.991:37796): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342106.991:37797): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342106.995:37798): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342107.049:37799): prog-id=1527 op=LOAD type=SYSCALL msg=audit(1781342107.049:37799): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe582cee20 a2=90 a3=9500000000 items=0 ppid=356957 pid=356958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342107.049:37799): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_ACCT msg=audit(1781342107.066:37800): pid=356943 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342107.067:37801): pid=356943 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342107.068:37802): pid=356943 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342107.075:37803): pid=356943 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342107.111:37804): pid=356943 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342107.111:37805): pid=356943 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_AUTH msg=audit(1781342107.111:37806): pid=356899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ossuser" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781342107.113:37807): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342107.113:37808): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.114:37809): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356937 suid=0 rport=42396 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.114:37810): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342107.117:37811): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342107.117:37812): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.118:37813): pid=356928 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342107.152:37814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342107.153:37815): pid=356970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342107.154:37816): pid=356966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356970 suid=74 rport=42402 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342107.154:37817): pid=356966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=356970 suid=74 rport=42402 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342107.168:37818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342107.230:37819): pid=356966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342107.230:37820): pid=356966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342107.249:37821): pid=356966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342107.249:37822): pid=356966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356970 suid=74 rport=42402 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342107.251:37823): pid=356966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342107.252:37824): pid=356966 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=356 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342107.252:37824): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd32d5c3e0 a2=1 a3=0 items=0 ppid=39353 pid=356966 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=356 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342107.252:37824): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342107.253:37825): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342107.284:37826): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.285:37827): pid=356994 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342107.286:37828): pid=356994 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342107.306:37829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342107.330:37830): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342107.330:37831): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.332:37832): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.360:37833): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356994 suid=0 rport=42402 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.360:37834): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342107.363:37835): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342107.363:37836): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342107.363:37837): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342107.363:37838): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342107.363:37839): pid=356966 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342108.529:37840): pid=357010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342108.530:37841): pid=357009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357010 suid=74 rport=42410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342108.530:37842): pid=357009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357010 suid=74 rport=42410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342108.602:37843): pid=357009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342108.602:37844): pid=357009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342108.623:37845): pid=357009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342108.624:37846): pid=357009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357010 suid=74 rport=42410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342108.626:37847): pid=357009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342108.626:37848): pid=357009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=357 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342108.626:37848): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1efbc6c0 a2=1 a3=0 items=0 ppid=39353 pid=357009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=357 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342108.626:37848): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342108.628:37849): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342108.642:37850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342108.645:37851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342108.665:37852): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342108.666:37853): pid=357029 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342108.668:37854): pid=357029 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342108.710:37855): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342108.710:37856): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342108.713:37857): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342108.758:37858): pid=357042 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342108.758:37859): pid=357042 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342108.760:37860): pid=357042 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342108.762:37861): pid=357042 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342108.770:37862): pid=357042 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342108.770:37863): pid=357042 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342108.772:37864): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357029 suid=0 rport=42410 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342108.772:37865): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342108.774:37866): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342108.774:37867): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342108.775:37868): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342108.775:37869): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342108.775:37870): pid=357009 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342108.795:37871): pid=357067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342108.796:37872): pid=357066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357067 suid=74 rport=42412 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342108.796:37873): pid=357066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357067 suid=74 rport=42412 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342108.801:37874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342108.856:37875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342108.984:37876): pid=357066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342108.984:37877): pid=357066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342109.016:37878): pid=357066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342109.016:37879): pid=357066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357067 suid=74 rport=42412 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342109.018:37880): pid=357066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342109.018:37881): pid=357066 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=358 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342109.018:37881): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff889fad50 a2=1 a3=0 items=0 ppid=39353 pid=357066 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=358 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342109.018:37881): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342109.019:37882): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342109.044:37883): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342109.045:37884): pid=357069 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342109.047:37885): pid=357069 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342109.091:37886): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342109.091:37887): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342109.092:37888): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342109.125:37889): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357069 suid=0 rport=42412 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342109.125:37890): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342109.127:37891): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342109.127:37892): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342109.128:37893): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342109.128:37894): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342109.128:37895): pid=357066 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342109.483:37896): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342109.668:37897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342109.976:37898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342109.976:37899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342110.113:37900): prog-id=1528 op=LOAD type=SYSCALL msg=audit(1781342110.113:37900): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd0421b800 a2=90 a3=9500000000 items=0 ppid=357125 pid=357126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342110.113:37900): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342110.183:37901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342110.192:37902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342110.252:37903): pid=357147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342110.254:37904): pid=357145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357147 suid=74 rport=42422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342110.254:37905): pid=357145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357147 suid=74 rport=42422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342110.296:37906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342110.330:37907): pid=357145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342110.330:37908): pid=357145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342110.352:37909): pid=357145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342110.352:37910): pid=357145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357147 suid=74 rport=42422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342110.355:37911): pid=357145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342110.355:37912): pid=357145 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=359 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342110.355:37912): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe87654640 a2=1 a3=0 items=0 ppid=39353 pid=357145 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=359 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342110.355:37912): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342110.357:37913): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342110.389:37914): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.390:37915): pid=357157 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342110.391:37916): pid=357157 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342110.435:37917): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342110.435:37918): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.438:37919): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342110.498:37920): pid=357158 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342110.498:37921): pid=357158 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342110.500:37922): pid=357158 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342110.504:37923): pid=357158 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342110.518:37924): pid=357158 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342110.518:37925): pid=357158 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.521:37926): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357157 suid=0 rport=42422 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.522:37927): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342110.525:37928): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342110.526:37929): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342110.527:37930): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342110.527:37931): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.527:37932): pid=357145 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.543:37933): pid=357174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342110.544:37934): pid=357173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357174 suid=74 rport=42428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342110.544:37935): pid=357173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357174 suid=74 rport=42428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342110.621:37936): pid=357173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342110.621:37937): pid=357173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342110.649:37938): pid=357173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342110.649:37939): pid=357173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357174 suid=74 rport=42428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342110.651:37940): pid=357173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342110.651:37941): pid=357173 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=360 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342110.651:37941): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff25db4c10 a2=1 a3=0 items=0 ppid=39353 pid=357173 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=360 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342110.651:37941): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342110.652:37942): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342110.682:37943): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.683:37944): pid=357176 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342110.685:37945): pid=357176 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342110.727:37946): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342110.727:37947): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.729:37948): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342110.775:37949): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342110.775:37950): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.775:37951): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357176 suid=0 rport=42428 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.775:37952): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342110.777:37953): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342110.778:37954): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.778:37955): pid=357173 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342110.854:37956): pid=356899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356912 suid=74 rport=33068 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342110.854:37957): pid=356899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356912 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342110.855:37958): pid=356899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=356899 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342110.856:37959): pid=356899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342111.986:37960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342111.989:37961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342111.991:37962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342111.994:37963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342112.088:37964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342112.092:37965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342112.121:37966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342112.124:37967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342112.143:37968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342112.150:37969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342112.167:37970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342112.176:37971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342112.238:37972): pid=357350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342112.239:37973): pid=357345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357350 suid=74 rport=42438 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342112.239:37974): pid=357345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357350 suid=74 rport=42438 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342112.265:37975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342112.269:37976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342112.309:37977): pid=357345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342112.309:37978): pid=357345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342112.310:37979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342112.322:37980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342112.334:37981): pid=357345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342112.334:37982): pid=357345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357350 suid=74 rport=42438 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342112.336:37983): pid=357345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342112.336:37984): pid=357345 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=361 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342112.336:37984): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe463d08a0 a2=1 a3=0 items=0 ppid=39353 pid=357345 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=361 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342112.336:37984): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342112.337:37985): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342112.349:37986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342112.365:37987): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.365:37988): pid=357422 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342112.367:37989): pid=357422 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342112.408:37990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342112.410:37991): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342112.410:37992): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.413:37993): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342112.459:37994): pid=357443 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342112.459:37995): pid=357443 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342112.460:37996): pid=357443 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342112.463:37997): pid=357443 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342112.471:37998): pid=357443 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342112.471:37999): pid=357443 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.473:38000): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357422 suid=0 rport=42438 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.474:38001): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342112.476:38002): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342112.476:38003): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342112.476:38004): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342112.476:38005): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.476:38006): pid=357345 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.497:38007): pid=357494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342112.498:38008): pid=357484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357494 suid=74 rport=42454 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342112.498:38009): pid=357484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357494 suid=74 rport=42454 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_STOP msg=audit(1781342112.504:38010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342112.538:38011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342112.555:38012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342112.574:38013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342112.576:38014): pid=357484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342112.577:38015): pid=357484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342112.594:38016): pid=357484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342112.595:38017): pid=357484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357494 suid=74 rport=42454 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342112.596:38018): pid=357484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342112.597:38019): pid=357484 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=362 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342112.597:38019): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb8902560 a2=1 a3=0 items=0 ppid=39353 pid=357484 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=362 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342112.597:38019): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342112.598:38020): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342112.617:38021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342112.624:38022): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.625:38023): pid=357524 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342112.628:38024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781342112.628:38025): pid=357524 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342112.672:38026): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342112.672:38027): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.673:38028): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342112.685:38029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342112.703:38030): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342112.703:38031): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.703:38032): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357524 suid=0 rport=42454 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.704:38033): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357524 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342112.706:38034): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342112.707:38035): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342112.707:38036): pid=357484 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357484 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342112.710:38037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342112.789:38038): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342112.967:38039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342113.226:38040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342113.227:38041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342113.325:38042): prog-id=1529 op=LOAD type=SYSCALL msg=audit(1781342113.325:38042): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff3b6254d0 a2=90 a3=9500000000 items=0 ppid=357580 pid=357581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342113.325:38042): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342113.389:38043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342113.399:38044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342113.509:38045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342113.563:38046): pid=357608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342113.654:38047): pid=357607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=357608 suid=74 rport=56804 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342113.654:38048): pid=357607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=357608 suid=74 rport=56804 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342113.803:38049): pid=357610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357610 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342113.803:38050): pid=357609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357610 suid=74 rport=52814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342113.804:38051): pid=357609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357610 suid=74 rport=52814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342113.882:38052): pid=357609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342113.882:38053): pid=357609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342113.899:38054): pid=357609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342113.900:38055): pid=357609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357610 suid=74 rport=52814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342113.902:38056): pid=357609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342113.902:38057): pid=357609 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=363 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342113.902:38057): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff697ebc60 a2=1 a3=0 items=0 ppid=39353 pid=357609 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=363 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342113.902:38057): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342113.903:38058): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342113.939:38059): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342113.941:38060): pid=357612 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342113.942:38061): pid=357612 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342113.986:38062): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342113.986:38063): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.002:38064): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342114.055:38065): pid=357613 uid=0 auid=0 ses=363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342114.055:38066): pid=357613 uid=0 auid=0 ses=363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342114.057:38067): pid=357613 uid=0 auid=0 ses=363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342114.061:38068): pid=357613 uid=0 auid=0 ses=363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342114.070:38069): pid=357613 uid=0 auid=0 ses=363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342114.071:38070): pid=357613 uid=0 auid=0 ses=363 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.074:38071): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357612 suid=0 rport=52814 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.074:38072): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342114.077:38073): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342114.077:38074): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342114.077:38075): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342114.077:38076): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.078:38077): pid=357609 uid=0 auid=0 ses=363 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342114.122:38078): pid=357607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="angel" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342114.675:38079): pid=357629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342114.676:38080): pid=357628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357629 suid=74 rport=52826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342114.676:38081): pid=357628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357629 suid=74 rport=52826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342114.753:38082): pid=357628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342114.753:38083): pid=357628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342114.771:38084): pid=357628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342114.772:38085): pid=357628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357629 suid=74 rport=52826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342114.774:38086): pid=357628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342114.774:38087): pid=357628 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=364 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342114.774:38087): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce31bb450 a2=1 a3=0 items=0 ppid=39353 pid=357628 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=364 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342114.774:38087): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342114.776:38088): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342114.809:38089): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.811:38090): pid=357631 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342114.812:38091): pid=357631 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342114.855:38092): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342114.855:38093): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.856:38094): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342114.908:38095): pid=357632 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342114.908:38096): pid=357632 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6865616C74685F6D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342114.909:38097): pid=357632 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342114.911:38098): pid=357632 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342114.921:38099): pid=357632 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342114.922:38100): pid=357632 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.924:38101): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357631 suid=0 rport=52826 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.925:38102): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342114.927:38103): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342114.927:38104): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342114.928:38105): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342114.928:38106): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342114.928:38107): pid=357628 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342115.607:38108): pid=357649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342115.608:38109): pid=357647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357649 suid=74 rport=52834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342115.608:38110): pid=357647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357649 suid=74 rport=52834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342115.616:38111): prog-id=0 op=UNLOAD type=USER_AUTH msg=audit(1781342115.691:38112): pid=357647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342115.691:38113): pid=357647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342115.717:38114): pid=357647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342115.717:38115): pid=357647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357649 suid=74 rport=52834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342115.720:38116): pid=357647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342115.720:38117): pid=357647 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=365 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342115.720:38117): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffceb23cb20 a2=1 a3=0 items=0 ppid=39353 pid=357647 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=365 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342115.720:38117): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342115.722:38118): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342115.742:38119): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342115.743:38120): pid=357673 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342115.745:38121): pid=357673 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342115.788:38122): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342115.788:38123): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342115.790:38124): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342115.793:38125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342115.845:38126): pid=357678 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342115.845:38127): pid=357678 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F727379736C6F672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342115.846:38128): pid=357678 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342115.849:38129): pid=357678 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342115.862:38130): pid=357678 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342115.862:38131): pid=357678 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342115.865:38132): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357673 suid=0 rport=52834 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342115.865:38133): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342115.868:38134): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342115.868:38135): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342115.869:38136): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342115.869:38137): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342115.869:38138): pid=357647 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342115.976:38139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342115.976:38140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342116.091:38141): prog-id=1530 op=LOAD type=SYSCALL msg=audit(1781342116.091:38141): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffe15bd300 a2=90 a3=9500000000 items=0 ppid=357707 pid=357708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342116.091:38141): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342116.137:38142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342116.152:38143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342116.252:38144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342116.492:38145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342116.496:38146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342116.500:38147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342116.504:38148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342116.506:38149): pid=357747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342116.507:38150): pid=357739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357747 suid=74 rport=52840 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342116.507:38151): pid=357739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357747 suid=74 rport=52840 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342116.591:38152): pid=357739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342116.591:38153): pid=357739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342116.608:38154): pid=357607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357608 suid=74 rport=56804 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342116.610:38155): pid=357607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357608 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342116.610:38156): pid=357607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342116.610:38157): pid=357607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342116.622:38158): pid=357739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342116.623:38159): pid=357739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357747 suid=74 rport=52840 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342116.624:38160): pid=357739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342116.624:38161): pid=357739 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=366 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342116.624:38161): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec72041e0 a2=1 a3=0 items=0 ppid=39353 pid=357739 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=366 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342116.624:38161): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342116.625:38162): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342116.656:38163): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342116.657:38164): pid=357802 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342116.658:38165): pid=357802 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342116.702:38166): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342116.702:38167): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342116.705:38168): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342116.779:38169): pid=357813 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342116.779:38170): pid=357813 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6472697665725F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342116.780:38171): pid=357813 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342116.785:38172): pid=357813 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342116.795:38173): pid=357813 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342116.796:38174): pid=357813 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342116.801:38175): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357802 suid=0 rport=52840 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342116.801:38176): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357802 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342116.803:38177): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342116.804:38178): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342116.804:38179): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342116.804:38180): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342116.804:38181): pid=357739 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342116.825:38182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342116.874:38183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342116.878:38184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342116.920:38185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342116.974:38186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342117.335:38187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342117.362:38188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342117.473:38189): pid=357974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342117.475:38190): pid=357973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357974 suid=74 rport=52856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342117.475:38191): pid=357973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=357974 suid=74 rport=52856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342117.550:38192): pid=357973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342117.550:38193): pid=357973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342117.569:38194): pid=357973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342117.570:38195): pid=357973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357974 suid=74 rport=52856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342117.572:38196): pid=357973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342117.572:38197): pid=357973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=367 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342117.572:38197): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6106e270 a2=1 a3=0 items=0 ppid=39353 pid=357973 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=367 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342117.572:38197): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342117.573:38198): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342117.599:38199): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342117.600:38200): pid=357979 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342117.601:38201): pid=357979 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342117.645:38202): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342117.645:38203): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342117.648:38204): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342117.701:38205): pid=357982 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342117.701:38206): pid=357982 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F686F7573656B656570696E672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342117.703:38207): pid=357982 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342117.706:38208): pid=357982 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342117.718:38209): pid=357982 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342117.718:38210): pid=357982 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342117.721:38211): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342117.721:38212): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342117.721:38213): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357979 suid=0 rport=52856 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342117.722:38214): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342117.724:38215): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342117.725:38216): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342117.726:38217): pid=357973 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342117.847:38218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342118.388:38219): pid=358000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342118.390:38220): pid=357999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358000 suid=74 rport=52868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342118.390:38221): pid=357999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358000 suid=74 rport=52868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342118.473:38222): pid=357999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342118.473:38223): pid=357999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342118.501:38224): pid=357999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342118.502:38225): pid=357999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358000 suid=74 rport=52868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342118.504:38226): pid=357999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342118.504:38227): pid=357999 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=368 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342118.504:38227): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec95147d0 a2=1 a3=0 items=0 ppid=39353 pid=357999 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=368 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342118.504:38227): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342118.506:38228): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342118.536:38229): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342118.538:38230): pid=358002 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342118.539:38231): pid=358002 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342118.581:38232): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342118.581:38233): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342118.583:38234): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342118.635:38235): pid=358003 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342118.635:38236): pid=358003 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342118.636:38237): pid=358003 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342118.640:38238): pid=358003 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342118.650:38239): pid=358003 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342118.651:38240): pid=358003 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342118.653:38241): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358002 suid=0 rport=52868 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342118.654:38242): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342118.655:38243): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342118.656:38244): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342118.656:38245): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342118.656:38246): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342118.656:38247): pid=357999 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=357999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=BPF msg=audit(1781342118.711:38248): prog-id=0 op=UNLOAD type=SERVICE_START msg=audit(1781342118.813:38249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342118.869:38250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342118.976:38251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342118.977:38252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342119.112:38253): prog-id=1531 op=LOAD type=SYSCALL msg=audit(1781342119.112:38253): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf341e150 a2=90 a3=9500000000 items=0 ppid=358081 pid=358082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342119.112:38253): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_STOP msg=audit(1781342119.143:38254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342119.223:38255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342119.227:38256): pid=358092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358092 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342119.229:38257): pid=358089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358092 suid=74 rport=52872 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342119.229:38258): pid=358089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358092 suid=74 rport=52872 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342119.239:38259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342119.317:38260): pid=358089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342119.317:38261): pid=358089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342119.338:38262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342119.348:38263): pid=358089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342119.348:38264): pid=358089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358092 suid=74 rport=52872 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342119.350:38265): pid=358089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342119.350:38266): pid=358089 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=369 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342119.350:38266): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea791f9b0 a2=1 a3=0 items=0 ppid=39353 pid=358089 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=369 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342119.350:38266): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342119.352:38267): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342119.374:38268): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342119.375:38269): pid=358116 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342119.377:38270): pid=358116 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342119.420:38271): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342119.421:38272): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342119.423:38273): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342119.475:38274): pid=358117 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342119.475:38275): pid=358117 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342119.477:38276): pid=358117 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342119.480:38277): pid=358117 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342119.493:38278): pid=358117 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342119.493:38279): pid=358117 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342119.496:38280): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358116 suid=0 rport=52872 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342119.496:38281): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342119.499:38282): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342119.499:38283): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342119.500:38284): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342119.500:38285): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342119.500:38286): pid=358089 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342120.124:38287): pid=358134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342120.125:38288): pid=358133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358134 suid=74 rport=52888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342120.125:38289): pid=358133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358134 suid=74 rport=52888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342120.214:38290): pid=358135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_AUTH msg=audit(1781342120.215:38291): pid=358133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342120.215:38292): pid=358133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781342120.215:38293): pid=358132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=358135 suid=74 rport=56862 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342120.216:38294): pid=358132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=358135 suid=74 rport=56862 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1781342120.244:38295): pid=358133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342120.244:38296): pid=358133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358134 suid=74 rport=52888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342120.246:38297): pid=358133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342120.247:38298): pid=358133 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=370 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342120.247:38298): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffffcc75a70 a2=1 a3=0 items=0 ppid=39353 pid=358133 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=370 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342120.247:38298): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342120.248:38299): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342120.281:38300): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342120.283:38301): pid=358137 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342120.284:38302): pid=358137 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342120.327:38303): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342120.327:38304): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342120.328:38305): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342120.380:38306): pid=358138 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342120.380:38307): pid=358138 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342120.381:38308): pid=358138 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342120.384:38309): pid=358138 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342120.396:38310): pid=358138 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342120.397:38311): pid=358138 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342120.399:38312): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358137 suid=0 rport=52888 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342120.399:38313): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342120.401:38314): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342120.402:38315): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342120.402:38316): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342120.403:38317): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342120.403:38318): pid=358133 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342121.036:38319): pid=358154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342121.038:38320): pid=358153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358154 suid=74 rport=52902 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342121.038:38321): pid=358153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358154 suid=74 rport=52902 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342121.114:38322): pid=358153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342121.114:38323): pid=358153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342121.142:38324): pid=358153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342121.142:38325): pid=358153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358154 suid=74 rport=52902 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342121.144:38326): pid=358153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342121.144:38327): pid=358153 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=371 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342121.144:38327): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff35008bd0 a2=1 a3=0 items=0 ppid=39353 pid=358153 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=371 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342121.144:38327): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342121.146:38328): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342121.168:38329): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342121.170:38330): pid=358156 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342121.172:38331): pid=358156 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342121.215:38332): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342121.215:38333): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342121.218:38334): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342121.283:38335): pid=358157 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342121.283:38336): pid=358157 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342121.284:38337): pid=358157 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342121.287:38338): pid=358157 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342121.301:38339): pid=358157 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342121.301:38340): pid=358157 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342121.304:38341): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358156 suid=0 rport=52902 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342121.305:38342): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342121.307:38343): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342121.307:38344): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342121.308:38345): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342121.308:38346): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342121.308:38347): pid=358153 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342121.500:38348): pid=358132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="alex" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342121.923:38349): pid=358173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342121.925:38350): pid=358172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358173 suid=74 rport=52906 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342121.925:38351): pid=358172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358173 suid=74 rport=52906 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342122.006:38352): pid=358172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342122.006:38353): pid=358172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342122.024:38354): pid=358172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342122.024:38355): pid=358172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358173 suid=74 rport=52906 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342122.027:38356): pid=358172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342122.027:38357): pid=358172 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=372 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342122.027:38357): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc8bed7270 a2=1 a3=0 items=0 ppid=39353 pid=358172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=372 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342122.027:38357): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342122.028:38358): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342122.032:38359): prog-id=0 op=UNLOAD type=USER_START msg=audit(1781342122.048:38360): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342122.050:38361): pid=358182 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342122.051:38362): pid=358182 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342122.095:38363): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342122.095:38364): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342122.098:38365): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342122.188:38366): pid=358187 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342122.189:38367): pid=358187 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342122.190:38368): pid=358187 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342122.194:38369): pid=358187 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342122.210:38370): pid=358187 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342122.211:38371): pid=358187 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342122.214:38372): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358182 suid=0 rport=52906 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342122.215:38373): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342122.219:38374): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342122.219:38375): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342122.220:38376): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342122.220:38377): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342122.220:38378): pid=358172 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342122.299:38379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342122.477:38380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342122.477:38381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342122.634:38382): prog-id=1532 op=LOAD type=SYSCALL msg=audit(1781342122.634:38382): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdb55794b0 a2=90 a3=9500000000 items=0 ppid=358234 pid=358235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342122.634:38382): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342122.703:38383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342122.718:38384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342122.836:38385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342122.852:38386): pid=358266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342122.853:38387): pid=358265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358266 suid=74 rport=52908 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342122.853:38388): pid=358265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358266 suid=74 rport=52908 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342122.929:38389): pid=358265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342122.929:38390): pid=358265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342122.962:38391): pid=358265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342122.962:38392): pid=358265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358266 suid=74 rport=52908 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342122.965:38393): pid=358265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342122.965:38394): pid=358265 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=373 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342122.965:38394): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe1dda7f70 a2=1 a3=0 items=0 ppid=39353 pid=358265 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=373 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342122.965:38394): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342122.966:38395): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342122.999:38396): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.000:38397): pid=358269 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342123.002:38398): pid=358269 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342123.046:38399): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342123.046:38400): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.048:38401): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342123.108:38402): pid=358270 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342123.108:38403): pid=358270 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342123.111:38404): pid=358270 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342123.116:38405): pid=358270 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342123.131:38406): pid=358270 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342123.132:38407): pid=358270 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.134:38408): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358269 suid=0 rport=52908 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.135:38409): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342123.138:38410): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342123.138:38411): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342123.139:38412): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342123.139:38413): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.139:38414): pid=358265 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.742:38415): pid=358286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342123.743:38416): pid=358285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358286 suid=74 rport=53666 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342123.743:38417): pid=358285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358286 suid=74 rport=53666 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342123.825:38418): pid=358285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342123.825:38419): pid=358285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342123.854:38420): pid=358285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342123.855:38421): pid=358285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358286 suid=74 rport=53666 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342123.857:38422): pid=358285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342123.857:38423): pid=358285 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=374 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342123.857:38423): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdcd4bbd70 a2=1 a3=0 items=0 ppid=39353 pid=358285 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=374 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342123.857:38423): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342123.859:38424): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342123.878:38425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342123.898:38426): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.900:38427): pid=358294 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342123.902:38428): pid=358294 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342123.944:38429): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342123.944:38430): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342123.946:38431): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342124.012:38432): pid=358301 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342124.012:38433): pid=358301 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342124.013:38434): pid=358301 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342124.053:38435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342124.064:38436): pid=358301 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342124.069:38437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342124.081:38438): pid=358301 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342124.081:38439): pid=358301 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342124.083:38440): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358294 suid=0 rport=53666 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342124.084:38441): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358294 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342124.086:38442): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342124.087:38443): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342124.088:38444): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342124.088:38445): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342124.088:38446): pid=358285 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358285 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342124.247:38447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342124.519:38448): pid=358132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358135 suid=74 rport=56862 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342124.520:38449): pid=358132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358135 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342124.521:38450): pid=358132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342124.521:38451): pid=358132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342124.867:38452): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342125.091:38453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342125.226:38454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342125.226:38455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342125.371:38456): prog-id=1533 op=LOAD type=SYSCALL msg=audit(1781342125.371:38456): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff57354130 a2=90 a3=9500000000 items=0 ppid=358390 pid=358391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342125.371:38456): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342125.450:38457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342125.466:38458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342125.611:38459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342125.990:38460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342125.993:38461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342125.997:38462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342126.207:38463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342126.258:38464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342126.413:38465): pid=358490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342126.415:38466): pid=358489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358490 suid=74 rport=53682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342126.415:38467): pid=358489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358490 suid=74 rport=53682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342126.501:38468): pid=358489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342126.501:38469): pid=358489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342126.531:38470): pid=358489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342126.532:38471): pid=358489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358490 suid=74 rport=53682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342126.534:38472): pid=358489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342126.534:38473): pid=358489 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=375 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342126.534:38473): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe24156b70 a2=1 a3=0 items=0 ppid=39353 pid=358489 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=375 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342126.534:38473): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342126.536:38474): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342126.571:38475): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342126.572:38476): pid=358493 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342126.574:38477): pid=358493 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342126.637:38478): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342126.637:38479): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342126.640:38480): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342126.713:38481): pid=358494 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342126.714:38482): pid=358494 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342126.716:38483): pid=358494 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342126.721:38484): pid=358494 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342126.735:38485): pid=358494 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342126.736:38486): pid=358494 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342127.002:38487): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342127.002:38488): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342127.149:38489): pid=358509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342127.149:38490): pid=358492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=358509 suid=74 rport=57102 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342127.150:38491): pid=358492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=358509 suid=74 rport=57102 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342127.520:38492): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358493 suid=0 rport=53682 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342127.521:38493): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342127.523:38494): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342127.524:38495): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342127.525:38496): pid=358489 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342127.549:38497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342127.553:38498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342127.557:38499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342127.773:38500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342127.870:38501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342127.921:38502): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342127.922:38503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342127.928:38504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342128.102:38505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342128.170:38506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342128.428:38507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342128.428:38508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342128.498:38509): pid=358652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342128.500:38510): pid=358650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358652 suid=74 rport=53698 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342128.503:38511): pid=358650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358652 suid=74 rport=53698 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342128.575:38512): prog-id=1534 op=LOAD type=SYSCALL msg=audit(1781342128.575:38512): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffe8429e90 a2=90 a3=9500000000 items=0 ppid=358656 pid=358657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342128.575:38512): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_AUTH msg=audit(1781342128.580:38513): pid=358650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342128.580:38514): pid=358650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342128.614:38515): pid=358650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342128.616:38516): pid=358650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358652 suid=74 rport=53698 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342128.619:38517): pid=358650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342128.619:38518): pid=358650 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=376 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342128.619:38518): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdfaa163d0 a2=1 a3=0 items=0 ppid=39353 pid=358650 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=376 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342128.619:38518): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342128.621:38519): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342128.666:38520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342128.677:38521): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342128.679:38522): pid=358672 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342128.680:38523): pid=358672 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342128.685:38524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342128.724:38525): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342128.724:38526): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342128.726:38527): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342128.753:38528): pid=358492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="node" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342128.771:38529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342128.773:38530): pid=358680 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342128.774:38531): pid=358680 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F756E626F756E642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342128.775:38532): pid=358680 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342128.778:38533): pid=358680 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342128.792:38534): pid=358680 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342128.792:38535): pid=358680 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342128.794:38536): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358672 suid=0 rport=53698 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342128.794:38537): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342128.797:38538): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342128.797:38539): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342128.798:38540): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342128.798:38541): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342128.798:38542): pid=358650 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342129.438:38543): pid=358704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342129.439:38544): pid=358703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358704 suid=74 rport=53702 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342129.439:38545): pid=358703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358704 suid=74 rport=53702 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342129.530:38546): pid=358703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342129.530:38547): pid=358703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342129.549:38548): pid=358703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342129.549:38549): pid=358703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358704 suid=74 rport=53702 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342129.552:38550): pid=358703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342129.552:38551): pid=358703 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=377 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342129.552:38551): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd560e1f50 a2=1 a3=0 items=0 ppid=39353 pid=358703 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=377 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342129.552:38551): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342129.554:38552): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342129.582:38553): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342129.584:38554): pid=358706 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342129.585:38555): pid=358706 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342129.629:38556): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342129.629:38557): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342129.631:38558): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342129.689:38559): pid=358707 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342129.689:38560): pid=358707 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E6669672067616C6572612D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342129.690:38561): pid=358707 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342129.694:38562): pid=358707 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342130.207:38563): pid=358707 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342130.208:38564): pid=358707 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342130.212:38565): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358706 suid=0 rport=53702 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342130.214:38566): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342130.216:38567): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342130.216:38568): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342130.217:38569): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342130.217:38570): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342130.217:38571): pid=358703 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358703 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342130.238:38572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342130.259:38573): pid=358730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342130.260:38574): pid=358724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358730 suid=74 rport=53710 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342130.260:38575): pid=358724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358730 suid=74 rport=53710 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342130.365:38576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342130.516:38577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342130.518:38578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342130.679:38579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342130.983:38580): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342131.138:38581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342131.362:38582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342131.363:38583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342131.363:38584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342131.472:38585): pid=358492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358509 suid=74 rport=57102 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342131.473:38586): pid=358492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358509 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342131.474:38587): pid=358492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342131.474:38588): pid=358492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342131.516:38589): prog-id=1535 op=LOAD type=SYSCALL msg=audit(1781342131.516:38589): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf8ae6d00 a2=90 a3=9500000000 items=0 ppid=358871 pid=358872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342131.516:38589): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342131.569:38590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342131.582:38591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342131.684:38592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342131.962:38593): pid=358724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342131.962:38594): pid=358724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342131.981:38595): pid=358724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342131.982:38596): pid=358724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358730 suid=74 rport=53710 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342131.983:38597): pid=358724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342131.984:38598): pid=358724 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=378 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342131.984:38598): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff87217ea0 a2=1 a3=0 items=0 ppid=39353 pid=358724 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=378 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342131.984:38598): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342131.985:38599): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342132.015:38600): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342132.016:38601): pid=358901 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342132.017:38602): pid=358901 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342132.080:38603): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342132.080:38604): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342132.084:38605): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342132.156:38606): pid=358902 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342132.157:38607): pid=358902 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520656E61626C652067616C6572612D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342132.159:38608): pid=358902 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342132.164:38609): pid=358902 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342132.911:38610): pid=358902 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342132.912:38611): pid=358902 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342132.915:38612): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358901 suid=0 rport=53710 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342132.916:38613): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342132.918:38614): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342132.919:38615): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342132.919:38616): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342132.919:38617): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342132.919:38618): pid=358724 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342132.942:38619): pid=358925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342132.943:38620): pid=358924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358925 suid=74 rport=53718 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342132.944:38621): pid=358924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=358925 suid=74 rport=53718 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342133.019:38622): pid=358924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342133.019:38623): pid=358924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342133.048:38624): pid=358924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342133.049:38625): pid=358924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358925 suid=74 rport=53718 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342133.051:38626): pid=358924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342133.051:38627): pid=358924 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=379 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342133.051:38627): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc3ea0ac0 a2=1 a3=0 items=0 ppid=39353 pid=358924 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=379 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342133.051:38627): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342133.054:38628): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342133.083:38629): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342133.084:38630): pid=358956 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342133.085:38631): pid=358956 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342133.128:38632): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342133.128:38633): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342133.130:38634): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342133.196:38635): pid=358964 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342133.196:38636): pid=358964 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E66696720686170726F78792D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342133.198:38637): pid=358964 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342133.202:38638): pid=358964 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342133.291:38639): pid=359009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342133.293:38640): pid=358923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=359009 suid=74 rport=43392 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342133.293:38641): pid=358923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=359009 suid=74 rport=43392 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342133.342:38642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342133.349:38643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342133.384:38644): prog-id=1536 op=LOAD type=SYSCALL msg=audit(1781342133.384:38644): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff6531f180 a2=90 a3=9500000000 items=0 ppid=359012 pid=359014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342133.384:38644): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363034623930343533366334303666343132336562623563313838623830 type=SERVICE_STOP msg=audit(1781342133.622:38645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342133.711:38646): pid=358964 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342133.711:38647): pid=358964 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342134.058:38648): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358956 suid=0 rport=53718 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342134.059:38649): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342134.063:38650): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342134.063:38651): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342134.063:38652): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342134.063:38653): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342134.064:38654): pid=358924 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342134.082:38655): pid=359145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359145 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342134.084:38656): pid=359143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=359145 suid=74 rport=33022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342134.084:38657): pid=359143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=359145 suid=74 rport=33022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342134.123:38658): prog-id=1537 op=LOAD type=BPF msg=audit(1781342134.123:38659): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.125:38660): prog-id=1538 op=LOAD type=BPF msg=audit(1781342134.125:38661): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.125:38662): prog-id=1539 op=LOAD type=BPF msg=audit(1781342134.125:38663): prog-id=1540 op=LOAD type=BPF msg=audit(1781342134.125:38664): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.125:38665): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.128:38666): prog-id=1541 op=LOAD type=BPF msg=audit(1781342134.128:38667): prog-id=1542 op=LOAD type=BPF msg=audit(1781342134.128:38668): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.128:38669): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.136:38670): prog-id=1543 op=LOAD type=BPF msg=audit(1781342134.136:38671): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.136:38672): prog-id=1544 op=LOAD type=BPF msg=audit(1781342134.136:38673): prog-id=1545 op=LOAD type=BPF msg=audit(1781342134.136:38674): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.136:38675): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.138:38676): prog-id=1546 op=LOAD type=BPF msg=audit(1781342134.138:38677): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342134.185:38678): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342134.334:38679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342134.441:38680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342134.442:38681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342134.579:38682): pid=359143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342134.579:38683): pid=359143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342134.595:38684): prog-id=1547 op=LOAD type=SYSCALL msg=audit(1781342134.595:38684): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe077ec890 a2=90 a3=9500000000 items=0 ppid=359265 pid=359266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342134.595:38684): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=USER_ACCT msg=audit(1781342134.601:38685): pid=359143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342134.602:38686): pid=359143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=359145 suid=74 rport=33022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342134.604:38687): pid=359143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342134.604:38688): pid=359143 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=380 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342134.604:38688): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1d65cdd0 a2=1 a3=0 items=0 ppid=39353 pid=359143 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=380 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342134.604:38688): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342134.605:38689): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342134.633:38690): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342134.636:38691): pid=359277 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342134.637:38692): pid=359277 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342134.733:38693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342134.743:38694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342134.891:38695): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342134.891:38696): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342134.895:38697): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342134.895:38698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342134.962:38699): pid=359318 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342134.963:38700): pid=359318 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520656E61626C6520686170726F78792D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342134.964:38701): pid=359318 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342134.967:38702): pid=359318 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342135.323:38703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342135.505:38704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342135.679:38705): pid=359318 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342135.680:38706): pid=359318 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342135.727:38707): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342135.727:38708): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342135.740:38709): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=359277 suid=0 rport=33022 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342135.741:38710): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342135.745:38711): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342135.745:38712): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342135.746:38713): pid=359143 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_AUTH msg=audit(1781342135.772:38714): pid=358923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="mohammad" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342135.790:38715): pid=359435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342135.802:38716): pid=359434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=359435 suid=74 rport=33030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342135.802:38717): pid=359434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=359435 suid=74 rport=33030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342136.074:38718): pid=359434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342136.074:38719): pid=359434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342136.105:38720): pid=359434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342136.106:38721): pid=359434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=359435 suid=74 rport=33030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342136.108:38722): pid=359434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342136.109:38723): pid=359434 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=381 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342136.109:38723): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe10469440 a2=1 a3=0 items=0 ppid=39353 pid=359434 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=381 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342136.109:38723): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342136.111:38724): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342136.145:38725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342136.156:38726): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342136.158:38727): pid=359438 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342136.159:38728): pid=359438 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342136.207:38729): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342136.207:38730): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342136.211:38731): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342136.216:38732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342136.291:38733): pid=359449 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342136.291:38734): pid=359449 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967207261626269746D712D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342136.292:38735): pid=359449 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342136.296:38736): pid=359449 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342136.324:38737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342136.876:38738): prog-id=1548 op=LOAD type=SYSCALL msg=audit(1781342136.876:38738): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd48495c20 a2=90 a3=9500000000 items=0 ppid=359842 pid=359843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342136.876:38738): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366134656664376235343032356332373536373566353263616636653237 type=USER_END msg=audit(1781342136.916:38739): pid=359449 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342136.916:38740): pid=359449 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342136.920:38741): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=359438 suid=0 rport=33030 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342136.920:38742): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342136.924:38743): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342136.924:38744): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342136.925:38745): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342136.925:38746): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342136.925:38747): pid=359434 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359434 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342136.946:38748): pid=359900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342136.948:38749): pid=359886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=359900 suid=74 rport=33044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342136.948:38750): pid=359886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=359900 suid=74 rport=33044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342137.043:38751): pid=359886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342137.043:38752): pid=359886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342137.069:38753): pid=359886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342137.069:38754): pid=359886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=359900 suid=74 rport=33044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342137.071:38755): pid=359886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342137.071:38756): pid=359886 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=382 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342137.071:38756): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea30d76a0 a2=1 a3=0 items=0 ppid=39353 pid=359886 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=382 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342137.071:38756): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342137.072:38757): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342137.512:38758): prog-id=1549 op=LOAD type=BPF msg=audit(1781342137.512:38759): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.513:38760): prog-id=1550 op=LOAD type=BPF msg=audit(1781342137.514:38761): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.514:38762): prog-id=1551 op=LOAD type=BPF msg=audit(1781342137.514:38763): prog-id=1552 op=LOAD type=BPF msg=audit(1781342137.514:38764): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.514:38765): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.517:38766): prog-id=1553 op=LOAD type=BPF msg=audit(1781342137.517:38767): prog-id=1554 op=LOAD type=BPF msg=audit(1781342137.517:38768): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.517:38769): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.525:38770): prog-id=1555 op=LOAD type=BPF msg=audit(1781342137.525:38771): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.525:38772): prog-id=1556 op=LOAD type=BPF msg=audit(1781342137.525:38773): prog-id=1557 op=LOAD type=BPF msg=audit(1781342137.525:38774): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.525:38775): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.527:38776): prog-id=1558 op=LOAD type=BPF msg=audit(1781342137.527:38777): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342137.574:38778): prog-id=0 op=UNLOAD type=USER_START msg=audit(1781342137.584:38779): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342137.585:38780): pid=360035 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342137.587:38781): pid=360035 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342137.631:38782): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342137.631:38783): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342137.635:38784): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342137.693:38785): pid=360051 uid=0 auid=0 ses=382 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342137.693:38786): pid=360051 uid=0 auid=0 ses=382 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520656E61626C65207261626269746D712D62756E646C65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342137.694:38787): pid=360051 uid=0 auid=0 ses=382 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342137.697:38788): pid=360051 uid=0 auid=0 ses=382 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342137.730:38789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342137.840:38790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342137.840:38791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342137.964:38792): prog-id=1559 op=LOAD type=SYSCALL msg=audit(1781342137.964:38792): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff278de7e0 a2=90 a3=9500000000 items=0 ppid=360221 pid=360222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342137.964:38792): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363065313636393065343564636364633862313064616331373930386530 type=SERVICE_START msg=audit(1781342138.019:38793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342138.027:38794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342138.158:38795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781342138.384:38796): pid=360051 uid=0 auid=0 ses=382 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342138.384:38797): pid=360051 uid=0 auid=0 ses=382 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342138.388:38798): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360035 suid=0 rport=33044 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342138.388:38799): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342138.392:38800): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342138.392:38801): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342138.393:38802): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342138.393:38803): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342138.393:38804): pid=359886 uid=0 auid=0 ses=382 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342138.409:38805): pid=360290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360290 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342138.411:38806): pid=360289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360290 suid=74 rport=33052 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342138.411:38807): pid=360289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360290 suid=74 rport=33052 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342138.509:38808): pid=360289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342138.509:38809): pid=360289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342138.529:38810): pid=360289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342138.529:38811): pid=360289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360290 suid=74 rport=33052 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342138.532:38812): pid=360289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342138.532:38813): pid=360289 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=383 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342138.532:38813): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea55b2560 a2=1 a3=0 items=0 ppid=39353 pid=360289 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=383 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342138.532:38813): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342138.534:38814): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342138.570:38815): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342138.572:38816): pid=360300 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342138.573:38817): pid=360300 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342138.616:38818): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342138.616:38819): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342138.618:38820): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342138.681:38821): pid=360301 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342138.682:38822): pid=360301 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D63696E6465722D766F6C756D65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342138.683:38823): pid=360301 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342138.687:38824): pid=360301 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342138.858:38825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342138.862:38826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342139.001:38827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342139.106:38828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1781342139.224:38829): pid=360301 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342139.224:38830): pid=360301 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342139.227:38831): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360300 suid=0 rport=33052 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342139.228:38832): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342139.231:38833): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342139.231:38834): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342139.231:38835): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342139.231:38836): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342139.231:38837): pid=360289 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360289 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342139.252:38838): pid=360399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342139.254:38839): pid=360396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360399 suid=74 rport=33054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342139.254:38840): pid=360396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360399 suid=74 rport=33054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342139.346:38841): pid=360396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342139.346:38842): pid=360396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342139.364:38843): pid=358923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=359009 suid=74 rport=43392 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342139.364:38844): pid=358923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=359009 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342139.366:38845): pid=358923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=358923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342139.366:38846): pid=358923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342139.370:38847): pid=360396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342139.371:38848): pid=360396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360399 suid=74 rport=33054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342139.373:38849): pid=360396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342139.373:38850): pid=360396 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=384 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342139.373:38850): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff126473d0 a2=1 a3=0 items=0 ppid=39353 pid=360396 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=384 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342139.373:38850): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342139.374:38851): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342139.404:38852): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342139.406:38853): pid=360403 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342139.408:38854): pid=360403 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342139.453:38855): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342139.453:38856): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342139.457:38857): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342139.540:38858): pid=360405 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342139.540:38859): pid=360405 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520656E61626C65206F70656E737461636B2D63696E6465722D766F6C756D65 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342139.543:38860): pid=360405 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342139.548:38861): pid=360405 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=BPF msg=audit(1781342139.971:38862): prog-id=1560 op=LOAD type=SYSCALL msg=audit(1781342139.971:38862): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff596b9580 a2=90 a3=9500000000 items=0 ppid=360554 pid=360555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342139.971:38862): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633834656466353030333837363262616164663834363538343532346239 type=CRYPTO_KEY_USER msg=audit(1781342140.021:38863): pid=360574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342140.023:38864): pid=360500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=360574 suid=74 rport=43482 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342140.023:38865): pid=360500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=360574 suid=74 rport=43482 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_END msg=audit(1781342140.217:38866): pid=360405 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342140.217:38867): pid=360405 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342140.221:38868): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360403 suid=0 rport=33054 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342140.222:38869): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342140.224:38870): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342140.224:38871): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342140.225:38872): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342140.225:38873): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342140.225:38874): pid=360396 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342140.252:38875): pid=360602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342140.253:38876): pid=360601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360602 suid=74 rport=33068 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342140.253:38877): pid=360601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360602 suid=74 rport=33068 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342140.344:38878): pid=360601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342140.344:38879): pid=360601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342140.365:38880): pid=360601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342140.366:38881): pid=360601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360602 suid=74 rport=33068 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342140.369:38882): pid=360601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342140.369:38883): pid=360601 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=385 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342140.369:38883): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff2e0089c0 a2=1 a3=0 items=0 ppid=39353 pid=360601 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=385 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342140.369:38883): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342140.372:38884): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=BPF msg=audit(1781342140.668:38885): prog-id=1561 op=LOAD type=BPF msg=audit(1781342140.668:38886): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.669:38887): prog-id=1562 op=LOAD type=BPF msg=audit(1781342140.669:38888): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.669:38889): prog-id=1563 op=LOAD type=BPF msg=audit(1781342140.669:38890): prog-id=1564 op=LOAD type=BPF msg=audit(1781342140.669:38891): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.669:38892): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.673:38893): prog-id=1565 op=LOAD type=BPF msg=audit(1781342140.673:38894): prog-id=1566 op=LOAD type=BPF msg=audit(1781342140.673:38895): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.673:38896): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.681:38897): prog-id=1567 op=LOAD type=BPF msg=audit(1781342140.681:38898): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.681:38899): prog-id=1568 op=LOAD type=BPF msg=audit(1781342140.681:38900): prog-id=1569 op=LOAD type=BPF msg=audit(1781342140.681:38901): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.681:38902): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342140.683:38903): prog-id=1570 op=LOAD type=BPF msg=audit(1781342140.683:38904): prog-id=0 op=UNLOAD type=SERVICE_STOP msg=audit(1781342140.723:38905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781342140.766:38906): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342140.767:38907): pid=360686 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342140.769:38908): pid=360686 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342140.814:38909): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342140.814:38910): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342140.817:38911): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342140.875:38912): pid=360700 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342140.875:38913): pid=360700 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D63696E6465722D6261636B7570 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342140.877:38914): pid=360700 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342140.881:38915): pid=360700 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342141.374:38916): pid=360700 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342141.374:38917): pid=360700 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342141.377:38918): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342141.377:38919): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342141.378:38920): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360686 suid=0 rport=33068 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342141.378:38921): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342141.380:38922): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342141.381:38923): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342141.381:38924): pid=360601 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342141.396:38925): pid=360765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342141.397:38926): pid=360764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360765 suid=74 rport=33074 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342141.397:38927): pid=360764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360765 suid=74 rport=33074 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342141.468:38928): pid=360764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342141.468:38929): pid=360764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342141.484:38930): pid=360500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="git" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342141.501:38931): pid=360764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342141.501:38932): pid=360764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360765 suid=74 rport=33074 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342141.503:38933): pid=360764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342141.503:38934): pid=360764 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=386 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342141.503:38934): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe358a4e40 a2=1 a3=0 items=0 ppid=39353 pid=360764 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=386 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342141.503:38934): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342141.507:38935): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342141.511:38936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_START msg=audit(1781342141.537:38937): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342141.538:38938): pid=360767 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342141.539:38939): pid=360767 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_LOGIN msg=audit(1781342141.582:38940): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342141.582:38941): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342141.584:38942): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342141.643:38943): pid=360768 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342141.643:38944): pid=360768 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520656E61626C65206F70656E737461636B2D63696E6465722D6261636B7570 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342141.646:38945): pid=360768 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342141.650:38946): pid=360768 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342142.329:38947): pid=360768 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342142.329:38948): pid=360768 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342142.332:38949): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342142.332:38950): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342142.332:38951): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360767 suid=0 rport=33074 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342142.333:38952): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342142.336:38953): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342142.336:38954): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342142.337:38955): pid=360764 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_START msg=audit(1781342142.361:38956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.367:38957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342142.369:38958): pid=360821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342142.370:38959): pid=360818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360821 suid=74 rport=33080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342142.371:38960): pid=360818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=360821 suid=74 rport=33080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342142.373:38961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.377:38962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342142.456:38963): pid=360818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342142.456:38964): pid=360818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342142.486:38965): pid=360818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.486:38966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342142.487:38967): pid=360818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360821 suid=74 rport=33080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342142.489:38968): pid=360818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342142.489:38969): pid=360818 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=387 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342142.489:38969): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc1aca450 a2=1 a3=0 items=0 ppid=39353 pid=360818 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=387 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342142.489:38969): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342142.491:38970): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342142.519:38971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342142.533:38972): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342142.534:38973): pid=360897 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342142.535:38974): pid=360897 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=SERVICE_START msg=audit(1781342142.562:38975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.566:38976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342142.574:38977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342142.579:38978): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342142.579:38979): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=SERVICE_START msg=audit(1781342142.584:38980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342142.585:38981): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342142.620:38982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.632:38983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.636:38984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342142.647:38985): pid=360920 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342142.647:38986): pid=360920 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520636F6E666967206F70656E737461636B2D6D616E696C612D7368617265 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342142.649:38987): pid=360920 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342142.652:38988): pid=360920 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342142.689:38989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.712:38990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342142.717:38991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342142.785:38992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342142.793:38993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342142.845:38994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342142.912:38995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342142.979:38996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342143.109:38997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342143.128:38998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342143.164:38999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342143.211:39000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1781342143.229:39001): pid=360920 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342143.230:39002): pid=360920 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342143.233:39003): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360897 suid=0 rport=33080 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342143.234:39004): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342143.236:39005): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342143.237:39006): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342143.237:39007): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342143.237:39008): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342143.237:39009): pid=360818 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342143.242:39010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342143.258:39011): pid=361273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342143.259:39012): pid=361272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=361273 suid=74 rport=42940 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342143.259:39013): pid=361272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=361273 suid=74 rport=42940 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1781342143.313:39014): prog-id=1571 op=LOAD type=SYSCALL msg=audit(1781342143.313:39014): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff65f40310 a2=90 a3=9500000001 items=0 ppid=361275 pid=361276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342143.313:39014): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306536643163386236653661646262353961326335316562343237646330 type=USER_ACCT msg=audit(1781342143.342:39015): pid=361280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1781342143.342:39016): pid=361280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1781342143.343:39017): pid=361280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342143.347:39018): pid=361272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342143.347:39019): pid=361272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342143.385:39020): pid=361272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342143.385:39021): pid=361272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=361273 suid=74 rport=42940 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_START msg=audit(1781342143.386:39022): pid=361280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781342143.387:39023): pid=361272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342143.387:39024): pid=361272 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=388 res=1UID="root" OLD-AUID="unset" AUID="root" type=SYSCALL msg=audit(1781342143.387:39024): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6be16d80 a2=1 a3=0 items=0 ppid=39353 pid=361272 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=388 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342143.387:39024): proctitle=737368643A20726F6F74205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342143.388:39025): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342143.426:39026): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342143.427:39027): pid=361305 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRED_ACQ msg=audit(1781342143.429:39028): pid=361305 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342143.454:39029): pid=361280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781342143.455:39030): pid=361280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1781342143.471:39031): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_START msg=audit(1781342143.471:39032): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342143.474:39033): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361310 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_ACCT msg=audit(1781342143.513:39034): pid=361310 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_CMD msg=audit(1781342143.514:39035): pid=361310 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=706373207265736F7572636520656E61626C65206F70656E737461636B2D6D616E696C612D7368617265 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root" type=CRED_REFR msg=audit(1781342143.515:39036): pid=361310 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=USER_START msg=audit(1781342143.517:39037): pid=361310 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342143.522:39038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=BPF msg=audit(1781342144.025:39039): prog-id=1572 op=LOAD type=BPF msg=audit(1781342144.025:39040): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.026:39041): prog-id=1573 op=LOAD type=BPF msg=audit(1781342144.026:39042): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.026:39043): prog-id=1574 op=LOAD type=BPF msg=audit(1781342144.026:39044): prog-id=1575 op=LOAD type=BPF msg=audit(1781342144.026:39045): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.026:39046): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.030:39047): prog-id=1576 op=LOAD type=BPF msg=audit(1781342144.030:39048): prog-id=1577 op=LOAD type=BPF msg=audit(1781342144.030:39049): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.030:39050): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.038:39051): prog-id=1578 op=LOAD type=BPF msg=audit(1781342144.038:39052): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.038:39053): prog-id=1579 op=LOAD type=BPF msg=audit(1781342144.038:39054): prog-id=1580 op=LOAD type=BPF msg=audit(1781342144.038:39055): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.038:39056): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.040:39057): prog-id=1581 op=LOAD type=BPF msg=audit(1781342144.040:39058): prog-id=0 op=UNLOAD type=BPF msg=audit(1781342144.088:39059): prog-id=0 op=UNLOAD type=USER_END msg=audit(1781342144.237:39060): pid=361310 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342144.237:39061): pid=361310 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" type=CRYPTO_KEY_USER msg=audit(1781342144.240:39062): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=361305 suid=0 rport=42940 laddr=192.168.122.103 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root" type=CRYPTO_KEY_USER msg=audit(1781342144.241:39063): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=USER_END msg=audit(1781342144.244:39064): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=CRED_DISP msg=audit(1781342144.244:39065): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" type=USER_END msg=audit(1781342144.245:39066): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=USER_LOGOUT msg=audit(1781342144.245:39067): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root" type=CRYPTO_KEY_USER msg=audit(1781342144.245:39068): pid=361272 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root" type=SERVICE_STOP msg=audit(1781342144.346:39069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342144.470:39070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342144.470:39071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1781342144.607:39072): prog-id=1582 op=LOAD type=SYSCALL msg=audit(1781342144.607:39072): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffca2cfa1d0 a2=90 a3=9500000000 items=0 ppid=361507 pid=361508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342144.607:39072): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336363333138653935613865653931313232356434383235663537626431 type=SERVICE_START msg=audit(1781342144.677:39073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342144.690:39074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342144.805:39075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342144.933:39076): pid=360500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=360574 suid=74 rport=43482 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342144.933:39077): pid=360500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360574 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342144.934:39078): pid=360500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=360500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342144.934:39079): pid=360500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342146.077:39080): pid=361587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361587 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342146.078:39081): pid=361562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=361587 suid=74 rport=46744 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342146.078:39082): pid=361562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=361587 suid=74 rport=46744 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342146.991:39083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342146.994:39084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342146.996:39085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342146.998:39086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342147.347:39087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342147.398:39088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342147.419:39089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342147.454:39090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342147.487:39091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342147.914:39092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342148.016:39093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342148.354:39094): pid=361562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="john" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342148.378:39095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342149.991:39096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342150.427:39097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342151.802:39098): pid=361562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=361587 suid=74 rport=46744 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342151.803:39099): pid=361562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361587 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342151.803:39100): pid=361562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=361562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342151.804:39101): pid=361562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342153.267:39102): pid=363012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=363012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342153.269:39103): pid=362979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=363012 suid=74 rport=45890 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342153.269:39104): pid=362979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=363012 suid=74 rport=45890 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342154.381:39105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342154.384:39106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1781342154.398:39107): pid=347376 uid=0 auid=0 ses=225 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root" type=SERVICE_STOP msg=audit(1781342154.400:39108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342154.434:39109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342154.521:39110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342154.565:39111): pid=362979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="rock" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342154.634:39112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342156.990:39113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342156.993:39114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342157.136:39115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342157.263:39116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342157.297:39117): pid=362979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=363012 suid=74 rport=45890 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342157.298:39118): pid=362979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=363012 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342157.298:39119): pid=362979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=362979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342157.298:39120): pid=362979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342157.989:39121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342157.992:39122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342158.000:39123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342158.154:39124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342158.221:39125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342158.248:39126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342158.267:39127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342158.283:39128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342160.386:39129): pid=363809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=363809 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342160.387:39130): pid=363791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=363809 suid=74 rport=45924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342160.387:39131): pid=363791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=363809 suid=74 rport=45924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342160.998:39132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342161.001:39133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342161.263:39134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342161.274:39135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342161.716:39136): pid=363791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342163.991:39137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342164.138:39138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342165.025:39139): pid=363791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=363809 suid=74 rport=45924 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342165.026:39140): pid=363791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=363809 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342165.027:39141): pid=363791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=363791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342165.027:39142): pid=363791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342165.991:39143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342166.167:39144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342166.854:39145): pid=364376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=364376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342166.855:39146): pid=364281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=364376 suid=74 rport=46632 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342166.855:39147): pid=364281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=364376 suid=74 rport=46632 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342166.989:39148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342166.993:39149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342167.087:39150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342167.284:39151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342168.458:39152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342168.459:39153): pid=364281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="trade" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342168.577:39154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342169.992:39155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342170.170:39156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342170.988:39157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342171.198:39158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342171.993:39159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342172.172:39160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342172.298:39161): pid=364281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=364376 suid=74 rport=46632 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342172.300:39162): pid=364281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=364376 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342172.301:39163): pid=364281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=364281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342172.301:39164): pid=364281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342172.996:39165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.000:39166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.004:39167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.008:39168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.012:39169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.027:39170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.032:39171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.037:39172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.145:39173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342173.149:39174): pid=364885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=364885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=SERVICE_START msg=audit(1781342173.152:39175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_SESSION msg=audit(1781342173.154:39176): pid=364808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=364885 suid=74 rport=33140 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342173.155:39177): pid=364808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=364885 suid=74 rport=33140 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342173.207:39178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.249:39179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.260:39180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.261:39181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.382:39182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.469:39183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.498:39184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342173.559:39185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.565:39186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.580:39187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.604:39188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.669:39189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.717:39190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.776:39191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.804:39192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.891:39193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342173.908:39194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342174.003:39195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342174.159:39196): pid=364808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342174.993:39197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342175.146:39198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342177.990:39199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342177.992:39200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342177.994:39201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342177.996:39202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342178.076:39203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342178.271:39204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342178.348:39205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342178.389:39206): pid=364808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=364885 suid=74 rport=33140 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342178.389:39207): pid=364808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=364885 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342178.401:39208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342178.402:39209): pid=364808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=364808 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342178.402:39210): pid=364808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342178.406:39211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342178.424:39212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342178.678:39213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342178.866:39214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342179.448:39215): pid=365639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=365639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342179.450:39216): pid=365638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=365639 suid=74 rport=33160 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342179.450:39217): pid=365638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=365639 suid=74 rport=33160 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342180.882:39218): pid=365638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342180.991:39219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342181.381:39220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342184.778:39221): pid=365638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=365639 suid=74 rport=33160 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342184.779:39222): pid=365638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=365639 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342184.780:39223): pid=365638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=365638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342184.780:39224): pid=365638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342184.806:39225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342184.810:39226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342185.019:39227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342185.070:39228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342185.871:39229): pid=366028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=366028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342185.872:39230): pid=366011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=366028 suid=74 rport=50364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342185.872:39231): pid=366011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=366028 suid=74 rport=50364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342187.420:39232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342187.423:39233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342187.426:39234): pid=366011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bot" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342187.589:39235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342187.615:39236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342188.992:39237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342188.997:39238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342189.003:39239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342189.008:39240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342189.243:39241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342189.276:39242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342189.283:39243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342189.292:39244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342189.567:39245): pid=366011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=366028 suid=74 rport=50364 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342189.568:39246): pid=366011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=366028 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342189.568:39247): pid=366011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=366011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342189.569:39248): pid=366011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342191.992:39249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342191.996:39250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342192.183:39251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342192.305:39252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342192.834:39253): pid=366598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=366598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342192.835:39254): pid=366597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=366598 suid=74 rport=49260 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342192.835:39255): pid=366597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=366598 suid=74 rport=49260 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342193.809:39256): pid=366597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="oracle" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342194.819:39257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342194.974:39258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342196.996:39259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342197.118:39260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342197.123:39261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342197.227:39262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342197.986:39263): pid=366597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=366598 suid=74 rport=49260 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342197.987:39264): pid=366597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=366598 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342197.987:39265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342197.988:39266): pid=366597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=366597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342197.988:39267): pid=366597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342198.165:39268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342198.867:39269): pid=367046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=367046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342198.941:39270): pid=367040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=367046 suid=74 rport=49298 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342198.941:39271): pid=367040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=367046 suid=74 rport=49298 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342198.993:39272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342199.141:39273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342199.459:39274): pid=367040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="node" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342200.986:39275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342201.166:39276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342201.800:39277): pid=367040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=367046 suid=74 rport=49298 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342201.801:39278): pid=367040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=367046 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342201.802:39279): pid=367040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=367040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342201.802:39280): pid=367040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342201.824:39281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342202.054:39282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342202.992:39283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342203.130:39284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.343:39285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.444:39286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342203.488:39287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.500:39288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.504:39289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.703:39290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.706:39291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.709:39292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.711:39293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.737:39294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342203.738:39295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342203.753:39296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.811:39297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.815:39298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342203.881:39299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.937:39300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342203.940:39301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342203.942:39302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342204.022:39303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.026:39304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.084:39305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.092:39306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.173:39307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.201:39308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.213:39309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.229:39310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.237:39311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342204.278:39312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342205.506:39313): pid=367947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=367947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342205.766:39314): pid=367946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=367947 suid=74 rport=34060 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342205.767:39315): pid=367946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=367947 suid=74 rport=34060 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342205.996:39316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342206.152:39317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342206.677:39318): pid=367946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="git" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342208.990:39319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342208.993:39320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342208.995:39321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342208.998:39322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342209.000:39323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342209.002:39324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342209.312:39325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342209.372:39326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342209.422:39327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342209.503:39328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342209.562:39329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342209.684:39330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342209.863:39331): pid=367946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=367947 suid=74 rport=34060 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342209.864:39332): pid=367946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=367947 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342209.865:39333): pid=367946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=367946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342209.865:39334): pid=367946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342211.609:39335): pid=368400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342211.741:39336): pid=368399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=368400 suid=74 rport=34118 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342211.741:39337): pid=368399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=368400 suid=74 rport=34118 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342211.765:39338): pid=368402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342211.766:39339): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=368402 suid=74 rport=44898 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342211.766:39340): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=368402 suid=74 rport=44898 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342211.857:39341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342211.858:39342): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342211.878:39343): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342211.892:39344): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342211.892:39345): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342211.923:39346): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342211.923:39347): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=368402 suid=74 rport=44898 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342211.926:39348): pid=368401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342211.926:39349): pid=368401 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=389 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1781342211.926:39349): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fffbe04c610 a2=4 a3=3e8 items=0 ppid=39353 pid=368401 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=389 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342211.926:39349): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342211.928:39350): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_ACCT msg=audit(1781342211.992:39351): pid=368433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781342211.992:39352): pid=368433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781342211.993:39353): pid=368433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342211.993:39354): pid=368433 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=390 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1781342211.993:39354): arch=c000003e syscall=1 success=yes exit=4 a0=9 a1=7ffe96762590 a2=4 a3=3e8 items=0 ppid=1 pid=368433 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=390 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342211.993:39354): proctitle="(systemd)" type=USER_START msg=audit(1781342211.996:39355): pid=368433 uid=0 auid=1000 ses=390 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_STOP msg=audit(1781342212.232:39356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342212.272:39357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342212.300:39358): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342212.301:39359): pid=368469 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1781342212.303:39360): pid=368469 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1781342212.346:39361): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1781342212.346:39362): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342212.348:39363): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368470 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_AUTH msg=audit(1781342212.362:39364): pid=368399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="aaa" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342212.414:39365): pid=368483 uid=1000 auid=1000 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1781342212.414:39366): pid=368483 uid=1000 auid=1000 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A777A6263776A716E65716263656F75797766766C6872637078776A797A686E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1781342212.415:39367): pid=368483 uid=1000 auid=1000 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1781342212.420:39368): pid=368483 uid=1000 auid=1000 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1781342213.435:39369): pid=368483 uid=1000 auid=1000 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1781342213.436:39370): pid=368483 uid=1000 auid=1000 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1781342213.440:39371): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1781342213.440:39372): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342214.721:39373): pid=368399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=368400 suid=74 rport=34118 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342214.721:39374): pid=368399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368400 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342214.722:39375): pid=368399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342214.722:39376): pid=368399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342215.997:39377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342216.000:39378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342216.147:39379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=27ada093976bca3b5970fe09cf908bf7ad5fe5176af6e025455807f161de9dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342216.178:39380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7e9d68ecfabad7d3ddf732c0d9bd5adeb83e83d0f6860d4e3cb4169678c53096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342217.992:39381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342217.995:39382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342218.160:39383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0828787d68e2b2d1b6bd791965a9464869016c6896f0b61a66065e68c4bc53c1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342218.248:39384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=433be296f650e9ba1190b6d790d1ea0993a9705dd8cd564ef7cae08c111513d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342218.767:39385): pid=369083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342218.849:39386): pid=369082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=369083 suid=74 rport=44410 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342218.849:39387): pid=369082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=369083 suid=74 rport=44410 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342219.282:39388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342219.290:39389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342219.294:39390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342219.299:39391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342219.431:39392): pid=369082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bot" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342219.472:39393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2486173c884a9dfd82f00ae86dfd762277d3a9e6e5eb73b98342fafbeac94501 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342219.597:39394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f66ef546f27e7f71fe16d2cff5b4a44e909fee079698c8a42c5f0002af8cf83e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342219.619:39395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ce317c58ca4e36ebf6fed02d68c0d03c87af5638a31fc8a883adef8d26b6156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342219.649:39396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ce44d69e296b291ef53d121bd45ced97ec6f78bf5e9940150543620bbc32b77e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342222.994:39397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342223.000:39398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342223.211:39399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0d7740cce7d3f6d54926863b9fcdd21bc9424e0346e43c72c3b186b92458963 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342223.373:39400): pid=369082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369083 suid=74 rport=44410 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342223.374:39401): pid=369082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369083 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342223.375:39402): pid=369082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342223.375:39403): pid=369082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342223.381:39404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9cb71d2bcdb37ba833fab61f2271a44b4b904368c7e974fba6e1f03431954e18 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342223.695:39405): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=368469 suid=1000 rport=44898 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342223.695:39406): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368469 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1781342223.699:39407): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1781342223.700:39408): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342223.701:39409): pid=368401 uid=0 auid=1000 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=368401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=SERVICE_START msg=audit(1781342224.992:39410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342225.146:39411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f913af87cdbadac04c4c996890673cfcf58478341f65a0e3acf1d344a9376f53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342225.217:39412): pid=369532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342225.219:39413): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=369532 suid=74 rport=41462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342225.220:39414): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=369532 suid=74 rport=41462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342225.300:39415): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342225.315:39416): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342225.386:39417): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342225.386:39418): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342225.416:39419): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342225.417:39420): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369532 suid=74 rport=41462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342225.419:39421): pid=369531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342225.419:39422): pid=369531 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=391 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1781342225.419:39422): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff0f6744a0 a2=4 a3=3e8 items=0 ppid=39353 pid=369531 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=391 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342225.419:39422): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342225.421:39423): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1781342225.466:39424): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342225.467:39425): pid=369562 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1781342225.469:39426): pid=369562 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1781342225.513:39427): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1781342225.513:39428): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342225.516:39429): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369563 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342225.561:39430): pid=369577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342225.562:39431): pid=369552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=369577 suid=74 rport=42462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342225.563:39432): pid=369552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=369577 suid=74 rport=42462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ACCT msg=audit(1781342225.595:39433): pid=369576 uid=1000 auid=1000 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1781342225.595:39434): pid=369576 uid=1000 auid=1000 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617866756672747663636277736A7675726177726B6A706E61616D6773736866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1781342225.598:39435): pid=369576 uid=1000 auid=1000 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1781342225.603:39436): pid=369576 uid=1000 auid=1000 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1781342226.152:39437): pid=369576 uid=1000 auid=1000 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1781342226.153:39438): pid=369576 uid=1000 auid=1000 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1781342226.157:39439): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1781342226.157:39440): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_AUTH msg=audit(1781342226.669:39441): pid=369552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="john" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342227.989:39442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342227.994:39443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342228.193:39444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342228.215:39445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1339901cf311c2af1cb257bd9537ca76eba164836803d33115b0a723e95f0a3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342228.268:39446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48e01cbb0ec0bdc9ecba07c495c5ed46993c449f0be8f5e6d871df5388538c2e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342228.470:39447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0e45577bb997d6d3a3d8fe24010fa92bc3b79c96ff1e57ab1cbb3855581ac9ef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342229.820:39448): pid=369552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369577 suid=74 rport=42462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342229.821:39449): pid=369552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369577 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342229.823:39450): pid=369552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342229.823:39451): pid=369552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342229.840:39452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342230.037:39453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=60e16690e45dccdc8b10dac17908e0ac7adbbc30532662711bcce485f78506c7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342231.286:39454): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369562 suid=1000 rport=41462 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342231.286:39455): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1781342231.291:39456): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1781342231.292:39457): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342231.293:39458): pid=369531 uid=0 auid=1000 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=369531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=SERVICE_START msg=audit(1781342231.310:39459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342231.468:39460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b5a7a2b8b7b49e1ed112914839ca9fabc15ed00058f8fa00879da870a20c8582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342232.249:39461): pid=370049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=370049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342232.251:39462): pid=370046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=370049 suid=74 rport=42508 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342232.251:39463): pid=370046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=370049 suid=74 rport=42508 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342232.993:39464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342233.203:39465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342233.207:39466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b58f3b4dbb0d9185a35b196886e3b0c141782d90774e4cdac77970a2fc6548eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342233.407:39467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=48fdd0f642df10d1d6b7771546016be2b7387d8a76d30c55ab74c93f9797bd7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342233.516:39468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342233.664:39469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=303eb54d21646b878741dca363b4b041d921078efe1e4145f57028ec096d22d1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342233.920:39470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342233.923:39471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342233.926:39472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342233.930:39473): pid=370046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342233.988:39474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.084:39475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.087:39476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.133:39477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.174:39478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8a2f9cee03f3d38b5056e3edb84a21dd278632cc84757a8285601598d251d995 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.190:39479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.194:39480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7919b7d5dea1419ece00581cbc7bcf4fd2f38ec11903b2324aa869f9721b8973 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.204:39481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.231:39482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.235:39483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.235:39484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1979d4921f7dd3c18be8cabc6d99b024f255067b7b02600a150cde9eb64b35e9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.239:39485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.262:39486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=58f1fae782e79c234677f350b6e4e7ef2c3e157cd70d30b6e1786ee7dd63fa53 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342234.304:39487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.440:39488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56659df0e5231fac02fbaeed88aadd9451f10a9a83101f37b5127570257e2136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.460:39489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ecefed1404e157b0ad7355c1151a5c0057b26bb494017a99bb24252a87312969 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.505:39490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c573dbd6a299b0f56e5185f0c41bda35a6af57eca589e78dc90e0f0d0b0a90a9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.545:39491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b79b22d2266b50e27fef9aa421e22a5b4c2afdc2e1449ecdc7f7dcc2fde52381 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.567:39492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a01e49493108fea9ad7b989dea8ea9284524aac293e285a1e484c987f07f3750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.597:39493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6ed9cfcaa8cb6deeb3c6b240855c94742a1ff29d8389c2595a125f343430ca5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.651:39494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=920eca750edd7e59dd5e5d5245283d4ebc4d359bf8f4fa8165981c55a829d03a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.669:39495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f1bdd0ee2635f47503c212402c18de32a053ea42cea3ea553d336dce3a37a2c3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342234.773:39496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8baa073b1ee0a8217fdc8e74d91c5b9776779c23373210f60126386db1059ad9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342236.989:39497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342237.073:39498): pid=370046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=370049 suid=74 rport=42508 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342237.074:39499): pid=370046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=370049 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1781342237.075:39500): pid=370046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=370046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1781342237.075:39501): pid=370046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342237.175:39502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3cc318e95a8ee911225d4825f57bd10b83ef9ecc1fda2187487fd1d49767f947 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342238.958:39503): pid=370855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=370855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342239.042:39504): pid=370854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=370855 suid=74 rport=36996 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342239.042:39505): pid=370854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=370855 suid=74 rport=36996 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.92.40.8 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1781342239.437:39506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342239.442:39507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342239.448:39508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342239.545:39509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342239.582:39510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342239.592:39511): pid=370854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="steam" exe="/usr/sbin/sshd" hostname=91.92.40.8 addr=91.92.40.8 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1781342239.748:39512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342239.755:39513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb645cbe441accff258e859a90785475c3b12cbd561c038461e73e38b5c1118e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342239.783:39514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=96edd2d7b4fa316d8d38d909ffaeb0b248ac5b5c47ab918ca1461c077c69cb5b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342239.796:39515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a27d105429ca485bdb307a2ee2ee77fd39b82ccd68ad5ef5eeb18b16f38aa8eb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342239.854:39516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b62a9aaef1cfb943b53512fb81c79b21afe4349bce8b10f4b734f9dcc6debad2 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342240.112:39517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=56270c7b3dc7c465be7d17f8abf0e590408a6a74639c75a6ffb80e5995d531be comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342240.277:39518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c3ec7925130bc7727f5d7daba41636baef3d4e5a7dd51112022ab736898af982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1781342241.496:39519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342241.536:39520): pid=371122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=371122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1781342241.539:39521): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=371122 suid=74 rport=46390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1781342241.539:39522): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=371122 suid=74 rport=46390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1781342241.613:39523): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342241.622:39524): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1781342241.657:39525): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342241.657:39526): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:4f:b9:59:94:e9:4c:fd:cc:11:34:f4:fe:58:4d:0a:6d:07:b7:9d:ff:25:ba:5c:8b:86:0a:71:34:62:91:a2:e8 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1781342241.688:39527): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1781342241.689:39528): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=371122 suid=74 rport=46390 laddr=38.102.83.129 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1781342241.691:39529): pid=371121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342241.691:39530): pid=371121 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=392 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1781342241.691:39530): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcf764e0e0 a2=4 a3=3e8 items=0 ppid=39353 pid=371121 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=392 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342241.691:39530): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1781342241.693:39531): pid=371121 uid=0 auid=1000 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_ACCT msg=audit(1781342241.754:39532): pid=371126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_ACQ msg=audit(1781342241.754:39533): pid=371126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset" type=USER_ROLE_CHANGE msg=audit(1781342241.755:39534): pid=371126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1781342241.755:39535): pid=371126 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=393 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1781342241.755:39535): arch=c000003e syscall=1 success=yes exit=4 a0=9 a1=7ffe96762590 a2=4 a3=3e8 items=0 ppid=1 pid=371126 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=393 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1781342241.755:39535): proctitle="(systemd)" type=USER_START msg=audit(1781342241.758:39536): pid=371126 uid=0 auid=1000 ses=393 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" type=SERVICE_START msg=audit(1781342241.999:39537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1781342242.023:39538): pid=371121 uid=0 auid=1000 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342242.025:39539): pid=371165 uid=0 auid=1000 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=371165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1781342242.027:39540): pid=371165 uid=0 auid=1000 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.51 addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1781342242.034:39541): pid=371121 uid=0 auid=1000 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1781342242.034:39542): pid=371121 uid=0 auid=1000 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.51 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1781342242.035:39543): pid=371121 uid=0 auid=1000 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:11:4b:49:fb:ac:16:5c:3d:38:de:23:2b:04:4e:6a:2d:6d:a0:3d:11:33:b8:11:65:a5:fb:a7:b1:60:57:23:cc direction=? spid=371166 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1781342242.105:39544): pid=371166 uid=1000 auid=1000 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1781342242.105:39545): pid=371166 uid=1000 auid=1000 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843497675202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1781342242.105:39546): pid=371166 uid=1000 auid=1000 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1781342242.110:39547): pid=371166 uid=1000 auid=1000 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=SERVICE_START msg=audit(1781342242.255:39548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=39f27ee8d13e3f5553be18fe8c71f09124c6929ba649fc03b162c978976af00d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"